Design/Logic Flaw

On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon RPD process to crash and restart. By simulating a...

PT-2019-1970

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 16.1R7 Junos OS versions 16.1X65 prior to 16.1X65-D48 Junos OS versions 16.2 prior to 16.2R2-S8 Junos OS versions 17.1 prior to 17.1R2-S7, 17.1R3 Junos OS versions 17.2 prior to 17.2R1-S7, 17.2R3 Junos OS versions...

Information disclosure

An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user...

CVE-2018-4053

An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can send malicious data to the root-listening service, causing the application to terminate and become unavailable...

CVE-2018-4052

An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user...

CVE-2018-4052

An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user...

CVE-2018-4052: Exposure of Sensitive Information to an Unauthorized Actor

An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user...

PT-2019-10782

Name of the Vulnerable Software and Affected Versions GOG Galaxy's Games version 1.2.47 Description A local information leak issue exists in the privileged helper tool, allowing an attacker to pass a PID and receive information that would usually be accessible only to the root user. Recommendatio...

PT-2019-10781

Name of the Vulnerable Software and Affected Versions GOG Galaxy's Games version 1.2.47 Description A local privilege escalation issue exists in the privileged helper tool, allowing an attacker to create directories and subdirectories globally on the root file system and modify permissions of...

CVE-2018-4051: Incorrect Permission Assignment for Critical Resource

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally create directories and subdirectories on the root file system, as well as change the permissions of existing directories...

CVE-2018-4050: Incorrect Permission Assignment for Critical Resource

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally adjust folder permissions leading to execution of arbitrary code with elevated privileges...

PT-2019-10780

Name of the Vulnerable Software and Affected Versions GOG Galaxy's Games version 1.2.47 Description A local privilege escalation issue exists in the privileged helper tool, allowing an attacker to adjust folder permissions globally. This can lead to the execution of arbitrary code with elevated...

CVE-2019-0204

A flaw was found in Docker image running under root user, where it is possible to overwrite the init helper binary of the container runtime or the command executor in Apache Mesos. A malicious user could use this flaw to gain root-level code execution on the host...

GOG Galaxy Games privileged helper denial-of-service vulnerability

Summary An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy’s Games, version 1.2.47 for macOS. An attacker can send malicious data to the root-listening service, causing the application to terminate and become unavailable. Tested Versions Gog...

GOG Galaxy Games fillProcessInformationForPids information leak vulnerability

Summary An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy’s Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user. Tested Versions Gog Galaxy...

CVE-2019-0204

A specifically crafted Docker image running under the root user can overwrite the init helper binary of the container runtime and/or the command executor in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.2, 1.6.0 to 1.6.1, and 1.7.0 to 1.7.1. A malicious actor can therefore gain...

@o/mobx-bridge (>=2.4.0, <=2.5.2), marcura-common-ui-helper (>=1.0.0, <=1.0.1) +1 more potentially affected by CVE-2019-5414 via kill-port (>=1.1.0, <=1.3.1)

kill-port NPM version =1.1.0, =2.4.0, =1.0.0, =0.1.0-alpha, =0.2.0 Source cves: CVE-2019-5414 Source advisory: GHSA-PMV6-GF98-P3R5...

CVE-2019-0204: Undefined Security Weakness

A specifically crafted Docker image running under the root user can overwrite the init helper binary of the container runtime and/or the command executor in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.2, 1.6.0 to 1.6.1, and 1.7.0 to 1.7.1. A malicious actor can therefore gain...

CVE-2019-5011

An exploitable privilege escalation vulnerability exists in the helper service CleanMyMac X, version 4.20, due to improper updating. The application failed to remove the vulnerable components upon upgrading to the latest version, leaving the user open to attack. A user with local access can use...

@o/mobx-bridge (>=2.4.0, <=2.5.2), marcura-common-ui-helper (>=1.0.0, <=1.0.1) +1 more potentially affected by CVE-2019-5414 via kill-port (>=1.1.0, <=1.3.1)

kill-port NPM version =1.1.0, =2.4.0, =1.0.0, =0.1.0-alpha, =0.2.0 Source cves: CVE-2019-5414 Source advisory: MEND:CVE-2019-5414...