1240 matches found
CVE-2019-17103
CVE-2019-17103 concerns an Incorrect Default Permissions issue in the BDLDaemon component of Bitdefender AV for Mac, enabling an attacker to elevate privileges to read protected directories. Affected software: Bitdefender AV for Mac, prior to version 8.0.0. Root cause: incorrect default permissio...
CVE-2019-17103: Incorrect Default Permissions
An Incorrect Default Permissions vulnerability in the BDLDaemon component of Bitdefender AV for Mac allows an attacker to elevate permissions to read protected directories. This issue affects: Bitdefender AV for Mac versions prior to 8.0.0...
SysWhispers - AV/EDR Evasion Via Direct System Calls
SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. All core syscalls are supported from Windows XP to 10. Example generated files available in example-output/. Introduction Various security products place hooks in user-mode APIs which allow...
UBUNTU-CVE-2019-20160
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a stack-based buffer overflow in the function av1parsetilegroup in mediatools/avparsers.c...
Stealthy Malware Flies Under AV Radar with Advanced Obfuscation
Researchers warn hackers are putting a new spin on old injection techniques and successfully end-running endpoint protection. They are tracking a campaign, that kicked off in January, that is still going strong exploiting weaknesses in web browsers. The objective is to hide in the background of...
September 10, 2019—KB4516033 (Security-only update)
None None...
CVE-2019-18819
Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiVectorRender!StrokeTextBlend+0x00000000000003a7...
CVE-2019-18821
Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x0000000000000053...
Code injection
Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiVectorRender!StrokeTextBlend+0x00000000000003a7...
CVE-2019-18819
Eximious Logo Designer 3.82 is affected by CVE-2019-18819, described as a user-mode write access conflict in ExiVectorRender!StrokeText_Blend+0x…3a7. Multiple sources (CNVD-2019-40495, RH: CVE-2019-18819, NVD) corroborate a vulnerability path within the logo design software that can lead to abnor...
CVE-2019-18821
Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x0000000000000053...
CVE-2019-18821
CVE-2019-18821 affects EximiousSoft Logo Designer 3.82. The connected sources describe a user-mode write access conflict starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x53 (0x53). Several documents note potential denial of service due to this vuln...
CVE-2019-18821: Out-of-bounds Write
Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x0000000000000053...
CVE-2019-3636
A File Masquerade vulnerability in McAfee Total Protection MTP version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with potential malware without being detected...
Design/Logic Flaw
A File Masquerade vulnerability in McAfee Total Protection MTP version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with potential malware without being detected...
CVE-2019-3636
McAfee Total Protection Windows client (versions up to 16.0.R21) is affected by CVE-2019-3636, a local File Masquerade vulnerability that lets an attacker read the plaintext list of AV-Scan exclusion files from the Windows registry and potentially replace excluded files with malware without detec...
CVE-2019-3636 File masquerade attack vulnerability in McAfee Total Protection
A File Masquerade vulnerability in McAfee Total Protection MTP version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with potential malware without being detected...
CVE-2019-3636: Cleartext Storage of Sensitive Information
A File Masquerade vulnerability in McAfee Total Protection MTP version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with potential malware without being detected...