5608 matches found
CVE-2019-13013
Little Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in their privileged helper tool. The privileged helper tool implements an XPC interface which is available to any process and allows directory listings and copying files as root...
Design/Logic Flaw
Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the operating system may have made a copy of the privileged helper which is not removed or updated immediately. Computers may therefore still be vulnerable after upgrading to 4.4.0. Version 4.4.1 fixes this...
CVE-2019-13013
CVE-2019-13013 affects Little Snitch versions 4.3.0 to 4.3.2. The vulnerability lies in the privileged helper tool, which exposes an XPC interface accessible to any process and allows directory listings and copying files as root, enabling local privilege escalation. The available connected docume...
CVE-2019-13014
Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the operating system may have made a copy of the privileged helper which is not removed or updated immediately. Computers may therefore still be vulnerable after upgrading to 4.4.0. Version 4.4.1 fixes this...
CVE-2019-13014
CVE-2019-13014 affects Little Snitch. The vulnerability arises from a privileged helper where the operating system may have retained a copy that is not removed or updated during upgrade to 4.4.0, leaving systems potentially exposed after upgrading. The issue is resolved in version 4.4.1 by removi...
CVE-2019-13013: Missing Authorization
Little Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in their privileged helper tool. The privileged helper tool implements an XPC interface which is available to any process and allows directory listings and copying files as root...
PT-2019-13079
Name of the Vulnerable Software and Affected Versions Little Snitch versions 4.3.0 through 4.3.2 Description The issue concerns a local privilege escalation in the privileged helper tool of Little Snitch. This tool implements an XPC interface that is accessible to any process, allowing for...
PT-2019-13080
Name of the Vulnerable Software and Affected Versions Little Snitch versions prior to 4.4.1 Description A vulnerability exists in a privileged helper tool of Little Snitch. Although version 4.4.0 fixes the vulnerability, the operating system may retain a copy of the privileged helper, which is no...
CVE-2019-13014: Incomplete Cleanup
Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the operating system may have made a copy of the privileged helper which is not removed or updated immediately. Computers may therefore still be vulnerable after upgrading to 4.4.0. Version 4.4.1 fixes this...
GHSA-4P8F-MMFJ-R45G Cross-site scripting in fat_free_crm
Fat Free CRM before 0.18.1 has XSS in the tagshelper in app/helpers/tagshelper.rb...
Cross-site scripting in fat_free_crm
Fat Free CRM before 0.18.1 has XSS in the tagshelper in app/helpers/tagshelper.rb...
Linux kernel code issue vulnerability (CNVD-2019-29597)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A code issue vulnerability exists in the sound/usb/helper.c file in versions of Linux kernel prior to 5.2.8. The vulnerability stems from an improperly designed or...
Design/Logic Flaw
Fat Free CRM before 0.18.1 has XSS in the tagshelper in app/helpers/tagshelper.rb...
PT-2019-10412
Name of the Vulnerable Software and Affected Versions Fat Free CRM versions prior to 0.18.1 Description The issue is related to a Cross-Site Scripting XSS flaw in the tags helper located in app/helpers/tags helper.rb. This allows for potential malicious script injection. Recommendations For...
SQL Injection
Overview sequelize is a promise-based Node.js ORM for Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server. Affected versions of this package are vulnerable to SQL Injection due to sequelize.json helper function not escaping values properly when formatting sub paths for JSON queries for MySQ...
CVE-2019-14203
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfshandler reply helper function: nfsmountreply...
CVE-2019-14201
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfshandler reply helper function: nfslookupreply...
CVE-2019-14202
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfshandler reply helper function: nfsreadlinkreply...
