CVE-2019-15295

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitdefender Antivirus Free 2020 versions prior to 1.0.15.138, allows an attacker to load an arbitrary DLL file from the search path.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-426

Affected software

No affected versions have been published.

Timeline

Published: Aug 21, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-152967.8An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a b CVE-2019-152976.5res_pjsip_t38 in Sangoma Asterisk 15.x before 15.7.4 and 16.x before 16.5.1 allows an attacker to trigger a crash by sending a declined stre CVE-2019-152988.8A problem was found in Centreon Web through 19.04.3. An authenticated command injection is present in the page include/configuration/configO CVE-2019-152998.8An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his profile page, the contact_autologin_key fie CVE-2019-153008.8A problem was found in Centreon Web through 19.04.3. An authenticated SQL injection is present in the page include/Administration/parameters CVE-2019-153019.8A SQL injection vulnerability in the method Terrasoft.Core.DB.Column.Const() in Terrasoft Bpm'online CRM-System SDK 7.13 allows attackers to CVE-2019-153026.5The pad management logic in XWiki labs CryptPad before 3.0.0 allows a remote attacker (who has access to a Rich Text pad with editing rights CVE-2019-153049.1Lierda Grill Temperature Monitor V1.00_50006 has a default password of admin for the admin account, which allows an attacker to cause a Deni CVE-2019-153109.8An issue was discovered on various devices via the Linkplay firmware. There is WAN remote code execution without user interaction. An attack CVE-2019-153119.8An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is Zolo Halo LAN remote code execution. The Zolo Halo Bluetoot CVE-2019-153128.8An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is a Zolo Halo DNS rebinding attack. The device was found to b CVE-2019-153136.1In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability.