CVE & Exploit Intelligence Database

CVE-2020-6021 7.8 HIGH EPSS 0.00

Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes place. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted DLL in the repair folder which will run with the Endpoint client’s privileges.

CWE-427 Dec 03, 2020

CVE-2020-25738 5.5 MEDIUM EPSS 0.00

CyberArk Endpoint Privilege Manager (EPM) 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that normally has credential access, such as a Chrome process that reads credentials from a SQLite database.

CWE-427 Nov 27, 2020

CVE-2020-5674 7.8 HIGH EPSS 0.00

Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CWE-427 Nov 24, 2020

CVE-2020-12329 7.8 HIGH EPSS 0.00

Uncontrolled search path in the Intel(R) VTune(TM) Profiler before version 2020 Update 1 may allow an authenticated user to potentially enable escalation of privilege via local access.

CWE-427 Nov 12, 2020

CVE-2020-12320 7.8 HIGH EPSS 0.00

Uncontrolled search path in Intel(R) SCS Add-on for Microsoft* SCCM before version 2.1.10 may allow an authenticated user to potentially enable escalation of privilege via local access.

CWE-427 Nov 12, 2020

CVE-2020-13771 7.8 HIGH EPSS 0.00

Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a (nonexistent) library file, allowing (under certain conditions) one to gain code execution (and elevation of privileges to the level of privilege held by the vulnerable component such as NT AUTHORITY\SYSTEM) via DLL hijacking. This affects ldiscn32.exe, IpmiRedirectionService.exe, LDAPWhoAmI.exe, and ldprofile.exe.

CWE-427 Nov 12, 2020

CVE-2020-5992 7.8 HIGH EPSS 0.00

NVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a vulnerability in its open-source software dependency in which the OpenSSL library is vulnerable to binary planting attacks by a local user, which may lead to code execution or escalation of privileges.

CWE-427 Nov 11, 2020

CVE-2020-25174 7.8 HIGH EPSS 0.00

A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute code on the system as a high privileged user.

CWE-427 Nov 06, 2020

CVE-2020-27955 9.8 CRITICAL 20 PoCs Analysis EPSS 0.93

Git LFS 2.12.0 allows Remote Code Execution.

CWE-427 Nov 05, 2020

CVE-2020-27708 7.8 HIGH EPSS 0.00

A vulnerability exists in the Origin Client that could allow a non-Administrative user to elevate their access to either Administrator or System. Once the user has obtained elevated access, they may be able to take control of the system and perform actions otherwise reserved for high privileged users or system Administrators.

CWE-427 Nov 02, 2020

CVE-2020-5145 8.6 HIGH EPSS 0.00

SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to remote code execution in the target system.

CWE-427 Oct 28, 2020

CVE-2020-24425 7.5 HIGH EPSS 0.00

Dreamweaver version 20.2 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. Successful exploitation could result in a local user with permissions to write to the file system running system commands with administrator privileges.

CWE-427 Oct 21, 2020

CVE-2020-24424 7.0 HIGH EPSS 0.01

Adobe Premiere Pro version 14.4 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CWE-427 Oct 21, 2020

CVE-2020-24423 7.0 HIGH EPSS 0.01

Adobe Media Encoder version 14.4 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CWE-427 Oct 21, 2020

CVE-2020-24420 7.0 HIGH EPSS 0.00

Adobe Photoshop for Windows version 21.2.1 (and earlier) is affected by an uncontrolled search path element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CWE-427 Oct 21, 2020

CVE-2020-24419 7.0 HIGH EPSS 0.01

Adobe After Effects version 17.1.1 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CWE-427 Oct 21, 2020

CVE-2020-24422 7.0 HIGH EPSS 0.12

Adobe Creative Cloud Desktop Application version 5.2 (and earlier) and 2.1 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CWE-427 Oct 21, 2020

CVE-2020-8345 7.3 HIGH EPSS 0.00

A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that could allow escalation of privilege.

CWE-427 Oct 14, 2020

CVE-2020-26947 7.8 HIGH 1 Writeup EPSS 0.00

monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . directory in an embedded RPATH (with a preference ahead of /usr/lib), which allows local users to gain privileges via a Trojan horse library in the current working directory.

CWE-427 Oct 10, 2020

CVE-2019-19115 7.8 HIGH EPSS 0.00

An escalation of privilege vulnerability in Nahimic APO Software Component Driver 1.4.2, 1.5.0, 1.5.1, 1.6.1 and 1.6.2 allows an attacker to execute code with SYSTEM privileges.

CWE-427 Oct 08, 2020