183 matches found
CVE-2019-3999
creationtimestamp| type| source ---|---|--- 2020-04-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48400 2020-05-12 18:48:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/druvainsyncinsynccphwnet64rcptype5privesc.rb...
CVE-2019-3999
Improper neutralization of special elements used in an OS command in Druva inSync Windows Client 6.5.0 allows a local, unauthenticated attacker to execute arbitrary operating system commands with SYSTEM privileges...
CVE-2019-3999
Improper neutralization of special elements used in an OS command in Druva inSync Windows Client 6.5.0 allows a local, unauthenticated attacker to execute arbitrary operating system commands with SYSTEM privileges...
CVE-2019-3999
CVE-2019-3999 affects Druva inSync Windows Client (notably versions around 6.5.0/6.5.2). A local, unauthenticated attacker can exploit improper neutralization of special elements in the inSyncCPHwnet64 RPC service (on TCP port 6064) to execute arbitrary OS commands with SYSTEM privileges, i.e., a...
CVE-2019-3999
Improper neutralization of special elements used in an OS command in Druva inSync Windows Client 6.5.0 allows a local, unauthenticated attacker to execute arbitrary operating system commands with SYSTEM privileges...
Druva inSync inSyncCPHwnet64.exe RPC Type 5 Privilege Escalation
Druva inSync client for Windows exposes a network service on TCP port 6064 on the local network interface. inSync versions 6.6.3 and prior do not properly validate user-supplied program paths in RPC type 5 messages, allowing execution of arbitrary commands as SYSTEM. This module has been tested...
KLA12102 DoS vulnerability in VMware Workstation and Player
A denial of service vulnerability was found in VMware Workstation and Player. Malicious users can exploit this vulnerability to cause denial of service. Original advisories VMSA-2020-0029 Related products VMware-Workstation VMware-Player CVE list CVE-2020-3999 high Solution Update to the latest...
CVE-2018-3999
Atlanti s Word Processor CVE-2018-3999 affects the JPEG parser in Atlantis Word Processor 3.2.5.0. A specially crafted embedded JPEG image can cause a length underflow, treated as unsigned, leading to a heap-based buffer overflow during decoding of JPEG markers (APPx handling) and subsequent copy...
CVE-2014-3999
The HordeLdap library before 2.0.6 for Horde allows remote attackers to bypass authentication by leveraging knowledge of the LDAP bind user DN...
CVE-2014-3999
The HordeLdap library before 2.0.6 for Horde allows remote attackers to bypass authentication by leveraging knowledge of the LDAP bind user DN...
CVE-2014-3999
The vulnerability CVE-2014-3999 affects the Horde_Ldap library used by Horde, where remote attackers can bypass authentication by leveraging knowledge of the LDAP bind user DN. It affects versions before 2.0.6; impact is authentication bypass with partial confidentiality/integrity/availability im...
CVE-2014-3999
The HordeLdap library before 2.0.6 for Horde allows remote attackers to bypass authentication by leveraging knowledge of the LDAP bind user DN...
CVE-2017-3999
This CVE entry is rejected and not used, per the initial description.
CVE-2016-3999
Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 104552 and 104703...
CVE-2016-3999
Zimbra Collaboration (before 8.7.0) is affected by multiple cross-site scripting (XSS) vulnerabilities. The validated connected sources identify the root cause as failure to sanitize user-supplied input, enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors. Aff...
CVE-2015-3999
CCleaner vulnerability CVE-2015-3999 affects CCleaner 3.26.0.1988 through 5.02.5101. The root cause is that CCleaner overwrites files and, in the process, writes filenames to disk, enabling local users to recover sensitive information from unallocated disk space. KoreLogic’s advisory provides a d...
KLA11367 Information disclosure vulnerability in CCleaner
Vulnerability related to writing the filenames to disk was found in CCleaner. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2015-3999 Related products CCleaner CVE list CVE-2015-3999 warning Solution Update to the latest version CCleaner...
HP Power Manager 'formExportDataLogs' Buffer Overflow
No description provided by source. $Id: hppowermanagerfilename.rb 14016 2011-10-20 17:40:21Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
CVE-2013-3999
The CVE-2013-3999 issue affects IBM Social Media Analytics, version 1.2 prior to FP1. The vulnerability is a reflective XSS flaw that could allow an attacker to inject arbitrary script or HTML when a user is lured to click a malicious link. IBM’s bulletin confirms affected product/version and des...