Google Earth Pro < 7.3.3 Multiple Vulnerabilities

The version of Google Earth Pro installed on the remote host is prior to 7.3.3. It is, therefore, affected by the following vulnerabilities : - A DLL hijacking vulnerability exists in the Windows installer due to the use of an untrusted search path. An unauthenticated, local attacker can exploit...

Security Bulletin: Vulnerability in IBM Java Runtime affects Host On-Demand

Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8 used by Host On-Demand. Host On-Demand has addressed the applicable CVE. The issue was disclosed as part of the IBM Java SDK and Runtime Environment updates in January 2020. Vulnerability Details CVEID: CVE-2019-4732...

CVE-2019-20781

An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur...

CVE-2019-20781

An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur...

CVE-2019-20781

An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur...

Design/Logic Flaw

An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur...

CVE-2019-20781

CVE-2019-20781 affects LG Bridge on Windows prior to April 2019. The connected documents identify a DLL Hijacking condition as the issue, but do not provide specifics on vulnerable components, root cause details, affected versions beyond “before April 2019,” or remediation guidance. No exploitati...

CVE-2019-20781

An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for SAP Applications

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by Content Collector for SAP Applications. These issues were disclosed as part of the IBM Java SDK updates in January 2020. Vulnerability Details CVEID: CVE-2020-2593 DESCRIPTION: An unspecified vulnerability in...

EmEditor 19.8 - Insecure File Permissions

Exploit Title: EmEditor 19.8 - Insecure File Permissions Date: 2020-04-27 Exploit Author: SajjadBnd Vendor Homepage: https://www.emeditor.com/ Software Link: https://support.emeditor.com/en/downloads/suggested Version: 19.8 Tested on: Win10 Professional x64 Description EmEditor is a fast,...

PowerSploit

This is an offensive tool for Windows PowerShell. It is a module for PowerSploit, a PowerShell framework for penetration testing and red teaming. The module contains several functions for code execution, including reflective DLL injection and DLL injection into a process. The functions can be use...

Security Bulletin: Vulnerability in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary There is vulnerability in IBM® SDK Java™ Technology Edition, Version 8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2019-4732 DESCRIPTION: IBM...

Security Bulletin: Vulnerability in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary There is vulnerability in IBM® SDK Java™ Technology Edition, Version 8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2019-4732 DESCRIPTION: IBM...

Security Bulletin: Vulnerability in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary There is vulnerability in IBM® SDK Java™ Technology Edition, Version 8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2019-4732 DESCRIPTION: IBM...

Security Bulletin: Vulnerability in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary There is vulnerability in IBM® SDK Java™ Technology Edition, Version 8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2019-4732 DESCRIPTION: IBM...

Security Bulletin: Vulnerability in IBM Java Runtime affect DB2 Recovery Expert for Linux, Unix and Windows(IBM SDK, Java Technology Edition Quarterly CPU - Jan 2020)

Summary DB2 Recovery Expert for Linux, UNIX and Windows has addressed the following vulnerabilities:IBM SDK, Java Technology Edition Quarterly CPU - Jan 2020 - Includes Oracle Jan 2020 CPU minus CVE-2020-2585, CVE-2020-2654, and CVE-2020-2590. These issues were disclosed as part of the IBM Java S...

DLL hijacking vulnerability in TIM Windows client (CNVD-2020-29413)

TIM is a cross-platform communication tool for team office collaboration. A DLL hijacking vulnerability exists in the TIM Windows client, which can be exploited by attackers to execute malicious code...

CVAD1912 - Wfica32 crash pointing to vdcdm30n.dll

When connecting from a client machine with CVAD 1912 LTSR installed, customers may notice that the ICA Connection stops at a White Screen with the message "Connecting". This problem is noticed with CWA 1911 and 1912 LTSR. Client side event logs indicate crash of wfica32 process. Log Name:...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Websphere Message Broker V8.

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, used by WebSphere Message Broker. These issues were disclosed as part of the IBM Java SDK updates in Jan 2020. Vulnerability Details CVEID: CVE-2020-2604 DESCRIPTION: An unspecified vulnerability in Java SE could all...

HPSBHF03665 rev. 3 - Realtek Audio Driver Security Update

Potential Security Impact Escalation of Privilege, Arbitrary Code Execution Source: HP, HP Product Security Response Team PSRT VULNERABILITY SUMMARY HP has been notified of a potential vulnerability with the Realtek High Definition Audio Driver for Windows, which may lead to DLL preloading and...