rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-2208 
Untrusted search path vulnerability in Installer of Electronic tendering and bid opening system available prior to June 12, 2017 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Acquisition, Technology & Logistics Agency
product: Installer of electronic tendering and bid opening system
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2209 
Untrusted search path vulnerability in the installer of Houkokusyo Sakusei Shien Tool ver3.0.2 (For the first installation) (The version which was available on the website from 2017 April 4 to 2017 May 18) and ver2.0 and later (For the first installation) (The versions which were available on the website prior to 2017 April 4) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Ministry of the Environment
product: Installer of Houkokusyo Sakusei Shien Tool
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2210 
Untrusted search path vulnerability in PatchJGD (PatchJGD101.EXE) ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Geospatial Information Authority of Japan (GSI)
product: PatchJGD (PatchJGD101.EXE)
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2211 
Untrusted search path vulnerability in PatchJGD (Hyoko) (PatchJGDh101.EXE) ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Geospatial Information Authority of Japan (GSI)
product: PatchJGD (Hyoko) (PatchJGDh101.EXE)
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2212 
Untrusted search path vulnerability in TKY2JGD (TKY2JGD1379.EXE) ver. 1.3.79 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Geospatial Information Authority of Japan (GSI)
product: TKY2JGD (TKY2JGD1379.EXE)
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2213 
Untrusted search path vulnerability in SemiDynaEXE (SemiDynaEXE2008.EXE) ver. 1.0.2 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Geospatial Information Authority of Japan (GSI)
product: SemiDynaEXE (SemiDynaEXE2008.EXE)
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2214 
Untrusted search path vulnerability in AppCheck and AppCheck Pro prior to version 2.0.1.15 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: JIRANSOFT JAPAN, INC.
product: AppCheck
vendor: JIRANSOFT JAPAN, INC.
product: AppCheck Pro
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2215 
Untrusted search path vulnerability in Installer of "Setup file of advance preparation" (jizen_setup.exe) (The version which was available on the website prior to 2017 June 12) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: National Tax Agency
product: Installer of "Setup file of advance preparation" (jizen_setup.exe)
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2216 
Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: W3 Eden, Inc.
product: WordPress Download Manager
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2217 
Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Problem types: description: Open Redirect
Affected products: vendor: W3 Eden, Inc.
product: WordPress Download Manager
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2218 
Untrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Apple
product: Installer of QuickTime for Windows
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2219 
Untrusted search path vulnerability in the [Simeji for Windows] installer (simeji.exe) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-09T16:00:00.000Z
CVE-2017-2220 
Untrusted search path vulnerability in Installer of CASL II simulator (self-extract format) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA)
product: Installer of CASL II simulator(self-extract format)
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2221 
Untrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Baidu Japan Inc.
product: Installer of Baidu IME
Published: 2017-08-04T16:00:00.000Z
CVE-2017-2222 
Cross-site scripting vulnerability in WP-Members prior to version 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Chad Butler
product: WP-Members
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2223 
Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM2 firmware version 1.01 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: I-O DATA DEVICE, INC.
product: TS-WPTCAM
vendor: I-O DATA DEVICE, INC.
product: TS-PTCAM
vendor: I-O DATA DEVICE, INC.
product: TS-PTCAM/POE
vendor: I-O DATA DEVICE, INC.
product: TS-WLC2
vendor: I-O DATA DEVICE, INC.
product: TS-WLCE
vendor: I-O DATA DEVICE, INC.
product: TS-WRLC
vendor: I-O DATA DEVICE, INC.
product: TS-WPTCAM2
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2224 
Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Web-Dorado
product: Event Calendar WD
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2225 
Untrusted search path vulnerability in EbidSettingChecker.exe (version 1.0.0.0) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Ministry of Education, Culture, Sports, Science and Technology (MEXT)
product: EbidSettingChecker.exe
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2226 
Untrusted search path vulnerability in Setup file of advance preparation for e-Tax software (WEB version) (1.17.1) and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: National Tax Agency
product: Setup file of advance preparation for e-Tax software (WEB version)
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2227 
Untrusted search path vulnerability in The installer of Charamin OMP Version 1.1.7.4 and earlier, Version 1.2.0.0 Beta and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Charamin steering committee
product: The installer of Charamin OMP
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2228 
Untrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool v4.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Agency for Natural Resources and Energy of Ministry of Economy,Trade and Industry (METI)
product: Teikihoukokusho Sakuseishien Tool
Published: 2017-08-18T13:00:00.000Z
CVE-2017-2229 
Untrusted search path vulnerability in Douroshisetu Kihon Data Sakusei System Ver1.0.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: National Institute for Land and Infrastructure Management
product: Douroshisetu Kihon Data Sakusei System
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2230 
Untrusted search path vulnerability in Douro Kouji Kanseizutou Check Program Ver3.1 (cdrw_checker_3.1.0.lzh) and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: National Institute for Land and Infrastructure Management
product: Douro Kouji Kanseizutou Check Program
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2231 
Untrusted search path vulnerability in The installer of MLIT DenshiSeikabutsuSakuseiShienKensa system Ver3.02 and earlier, distributed till June 20, 2017, The self-extracting archive including the installer of MLIT DenshiSeikabutsuSakuseiShienKensa system Ver3.02 and earlier, distributed till June 20, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Ministry of Land, Infrastructure, Transport and Tourism, Japan
product: The installer of MLIT DenshiSeikabutsuSakuseiShienKensa system
vendor: Ministry of Land, Infrastructure, Transport and Tourism, Japan
product: The self-extracting archive including the installer of MLIT DenshiSeikabutsuSakuseiShienKensa system
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2232 
Untrusted search path vulnerability in Installer of Shinseiyo Sogo Soft (4.8A) and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: The Ministry of Justice
product: Installer of Shinseiyo Sogo Soft
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2233 
Untrusted search path vulnerability in Installer of PDF Digital Signature Plugin (G2.30) and earlier, distributed till June 29, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: The Ministry of Justice
product: Installer of PDF Digital Signature Plugin
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2234 
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier may allow remote attackers to access a non-documented developer screen to perform operations on device with administrative privileges.
Problem types: description: Hidden Functionality
Affected products: vendor: Toshiba Lighting & Technology Corporation
product: Toshiba Home gateway HEM-GW16A
vendor: Toshiba Lighting & Technology Corporation
product: Toshiba Home gateway HEM-GW26A
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2235 
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an attacker to bypass access restriction to change the administrator account password via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Toshiba Lighting & Technology Corporation
product: Toshiba Home gateway HEM-GW16A
vendor: Toshiba Lighting & Technology Corporation
product: Toshiba Home gateway HEM-GW26A
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2236 
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier uses hard-coded credentials, which may allow attackers to perform operations on device with administrative privileges.
Problem types: description: Use of Hard-coded Credentials
Affected products: vendor: Toshiba Lighting & Technology Corporation
product: Toshiba Home gateway HEM-GW16A
vendor: Toshiba Lighting & Technology Corporation
product: Toshiba Home gateway HEM-GW26A
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2237 
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: Toshiba Lighting & Technology Corporation
product: Toshiba Home gateway HEM-GW16A
vendor: Toshiba Lighting & Technology Corporation
product: Toshiba Home gateway HEM-GW26A
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2238 
Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier and Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: Toshiba Lighting & Technology Corporation
product: Toshiba Home gateway HEM-GW16A
vendor: Toshiba Lighting & Technology Corporation
product: Toshiba Home gateway HEM-GW26A
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2239 
Marp versions v0.0.10 and earlier may allow an attacker to access local resources and files using JavaScript.
Problem types: description: Improper Access Control
Affected products: vendor: Yuki Hattori
product: Marp
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2240 
Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read arbitrary files via "File Transfer Web Service".
Problem types: description: Directory traversal
Affected products: vendor: Hammock Corporation
product: AssetView for MacOS
Published: 2017-07-14T16:00:00.000Z
CVE-2017-2241 
SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service".
Problem types: description: SQL Injection
Affected products: vendor: Hammock Corporation
product: AssetView for MacOS
Published: 2017-07-14T16:00:00.000Z
CVE-2017-2242 
Untrusted search path vulnerability in Flets Setsuzoku Tool for Windows all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION
product: Flets Setsuzoku Tool for Windows
Published: 2017-08-28T20:00:00.000Z
CVE-2017-2243 
Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: dFactory
product: Responsive Lightbox
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2244 
Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: BROTHER INDUSTRIES, LTD.
product: MFC-J960DWN
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2245 
Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitrary files via unspecified vectors.
Problem types: description: Directory traversal
Affected products: vendor: Vladimir Anokhin
product: Shortcodes Ultimate
Published: 2017-07-07T13:00:00.000Z
CVE-2017-2246 
Untrusted search path vulnerability in Installer of Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Chitora soft
product: Installer of Lhaz
Published: 2017-07-14T16:00:00.000Z
CVE-2017-2247 
Untrusted search path vulnerability in Self-extracting archive files created by Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Chitora soft
product: Self-extracting archive files created by Lhaz
Published: 2017-07-14T16:00:00.000Z
CVE-2017-2248 
Untrusted search path vulnerability in Installer of Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Chitora soft
product: Installer of Lhaz+
Published: 2017-07-14T16:00:00.000Z
CVE-2017-2249 
Untrusted search path vulnerability in Self-extracting archive files created by Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Chitora soft
product: Self-extracting archive files created by Lhaz+
Published: 2017-07-14T16:00:00.000Z
CVE-2017-2252 
Untrusted search path vulnerability in self-extracting archive files created by File Compact Ver.5 version 5.10 and earlier, Ver.6 version 6.02 and earlier, Ver.7 version 7.02 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: SOURCENEXT CORPORATION
product: Self-extracting archive files created by File Compact
Published: 2017-07-14T16:00:00.000Z
CVE-2017-2253 
Untrusted search path vulnerability in Installer of Yahoo! Toolbar (for Internet explorer) v8.0.0.6 and earlier, with its timestamp prior to June 13, 2017, 18:18:55 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Yahoo Japan Corporation
product: Installer of Yahoo! Toolbar (for Internet explorer)
Published: 2017-07-14T16:00:00.000Z
CVE-2017-2254 
Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2017-08-28T20:00:00.000Z
CVE-2017-2255 
Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Space".
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2017-08-28T20:00:00.000Z
CVE-2017-2256 
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Memo".
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2017-08-28T20:00:00.000Z
CVE-2017-2257 
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2017-08-28T20:00:00.000Z
CVE-2017-2258 
Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon SOAP API "WorkflowHandleApplications".
Problem types: description: Directory traversal
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2017-08-28T20:00:00.000Z
CVE-2017-2265 
Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Tomoki Fuke
product: FileCapsule Deluxe Portable
Published: 2017-07-14T16:00:00.000Z
CVE-2017-2266 
Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Tomoki Fuke
product: Encrypted files in self-decryption format created by FileCapsule Deluxe Portable
Published: 2017-07-14T16:00:00.000Z
CVE-2017-2267 
Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Tomoki Fuke
product: FileCapsule Deluxe Portable
Published: 2017-07-14T16:00:00.000Z
CVE-2017-2268 
Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Tomoki Fuke
product: Encrypted files in self-decryption format created by FileCapsule Deluxe Portable
Published: 2017-07-14T16:00:00.000Z
CVE-2017-2269 
Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Tomoki Fuke
product: FileCapsule Deluxe Portable
Published: 2017-07-14T16:00:00.000Z
CVE-2017-2270 
Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Tomoki Fuke
product: Encrypted files in self-decryption format created by FileCapsule Deluxe Portable
Published: 2017-07-14T16:00:00.000Z
CVE-2017-2271 
Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.2.8.3.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: HiBARA Software
product: Self-extracting encrypted files created by AttacheCase
Published: 2017-07-14T16:00:00.000Z
CVE-2017-2272 
Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.3.2.2.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: HiBARA Software
product: Self-extracting encrypted files created by AttacheCase
Published: 2017-07-14T16:00:00.000Z