CVE-2020-6797

By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user's computer. The attacker is restricted as they are unable to download non-quarantined files or supply command line arguments to the application, limiting the impact...

Microsoft Windows Backup Service Elevation of Privilege Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Backup Service, which arises from a program's failure to properly handle operations on files. The vulnerability can ...

openSUSE: Security Advisory for nextcloud (openSUSE-SU-2020:0220-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-0754

An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0753...

CVE-2020-0703

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'...

PT-2020-18906 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.5.0 Description: A specially crafted TIFF file can cause an out-of-bounds write in the igcore19d.dll TIFF tifread parser, resulting in remote code execution. An attacker needs to provide a malformed file to the...

USN-4275-1 qtbase-opensource-src vulnerabilities

It was discovered that Qt incorrectly handled certain PPM images. If a user or automated system were tricked into opening a specially crafted PPM file, a remote attacker could cause Qt to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS...

CVE-2012-6309

CVE-2012-6309 affects Arctic Torrent 1.4. A vulnerability in .torrent file handling could allow a remote attacker to cause a Denial of Service. Documents specify unspecified vectors and do not provide concrete exploit details. CVSS metrics indicate a network-accessible issue with low initial comp...

PT-2020-7283

Name of the Vulnerable Software and Affected Versions: JPEGsnoop version 1.5.2 Description: A vulnerability exists due to an unspecified issue in JPEG file handling, which could let a malicious user execute arbitrary code. Recommendations: For JPEGsnoop version 1.5.2, at the moment, there is no...

CVE-2012-6307: Undefined Security Weakness

A vulnerability exists in JPEGsnoop 1.5.2 due to an unspecified issue in JPEG file handling, which could let a malicious user execute arbitrary code...

CVE-2012-6309: Undefined Security Weakness

A vulnerability exists in Arctic Torrent 1.4 via unspecified vectors in .torrent file handling, which could let a malicious user cause a Denial of Service...

The vulnerability of the Windows operating system update notification dispatcher allows a hacker to escalate their privileges.

The vulnerability of the Windows operating system update notification dispatcher is related to file handling errors. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

USN-4240-1: Kamailio vulnerability

It was discovered that Kamailio incorrectly handled a specially crafted file. An attacker could possibly use this issue to cause a denial of service or other unspecified impact...

USN-4239-1 php5, php7.0, php7.2, php7.3 vulnerabilities

It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 ESM, 16.04 LTS, 18.04 LTS, 19.04 and 19.10. CVE-2019-11045 It was discovered that PHP incorrectly handled certain inputs. An...

CVE-2020-0636

An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'...

CVE-2020-0620

An elevation of privilege vulnerability exists when Microsoft Cryptographic Services improperly handles files, aka 'Microsoft Cryptographic Services Elevation of Privilege Vulnerability'...

PT-2020-1285

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description The issue exists due to improper handling of objects in memory by the Cryptographic Services in the Windows operating system. This can allow an attacker to elevate thei...

CVE-2019-17009

When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to locate and exploit a vulnerability in file handling in the updater service. Note: This attack requires local system access and only affects Windows. Other...

Sql injection

When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to locate and exploit a vulnerability in file handling in the updater service. Note: This attack requires local system access and only affects Windows. Other...

CVE-2019-17009

When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to locate and exploit a vulnerability in file handling in the updater service. Note: This attack requires local system access and only affects Windows. Other...