CVE-2020-27192

BinaryNights ForkLift 3.4 was compiled with the com.apple.security.cs.disable-library-validation flag enabled which allowed a local attacker to inject code into ForkLift. This would allow the attacker to run malicious code with escalated privileges through ForkLift's helper tool...

PT-2020-16657

Name of the Vulnerable Software and Affected Versions BinaryNights ForkLift version 3.4 Description A local attacker can inject code into ForkLift due to it being compiled with the com.apple.security.cs.disable-library-validation flag enabled. This allows the attacker to run malicious code with...

Kaspersky: [Fixed] KIS for macOS is vulnerable to AV bypass due to improper client authorization on XPC service

Note! Thank you for your report. For the purposes of the further analysis of the vulnerability, that you kindly report to us, could you please fill all fields in square brackets. This information will help us to respond you more quickly and triage your report. Thanks a lot for your assistance...

CVE-2020-11470

Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Zoom Client's microphone and camera access...

CVE-2020-11470: Insufficient Verification of Data Authenticity

Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Zoom Client's microphone and camera access...

PT-2020-12632

Name of the Vulnerable Software and Affected Versions Zoom Client for Meetings versions 4.6.8 and earlier Description The issue allows a local process to obtain unprompted microphone and camera access by loading a crafted library, thereby inheriting the Zoom Client's access. This is possible due ...

Barco ClickShare Button R9861500D01 Code Issue Vulnerability

The Barco ClickShare Button R9861500D01 is a wireless control device for presentation systems from Barco Belgium. A security vulnerability exists in Barco ClickShare Button R9861500D01 prior to version 1.9.0, which is caused by the Barco signed 'ClickshareForWindows.exe' binary loading a large...

Cross-site Request Forgery (CSRF)

pimcore/pimcore is vulnerable to cross-site request forgery CSRF attacks. The library only validates the CSRF token in the Roles function, allowing a malicious user to conduct a CSRF attack...

Arbitrary File Write

wildfly-deployment-repository is vulnerable to the zip-slip vulnerability. The library does not validate the target path when extracting and deploying .war files, leading to arbitrary file writes outside of the intended target directory...

Fedora Update for nodejs-npm-user-validate FEDORA-2013-11780

Check for the Version of nodejs-npm-user-validate OpenVAS Vulnerability Test Fedora Update for nodejs-npm-user-validate FEDORA-2013-11780 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribu...

[SECURITY] Fedora 18 Update: nodejs-npm-user-validate-0.0.3-1.fc18

This library validates usernames, passwords, and e-mail addresses to the standards required by the npm registry...

CentOS Update for speex CESA-2008:0235 centos4 i386

Check for the Version of speex OpenVAS Vulnerability Test CentOS Update for speex CESA-2008:0235 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

USN-156-1: TIFF vulnerability

Wouter Hanegraaff discovered that the TIFF library did not sufficiently validate the "YCbCr subsampling" value in TIFF image headers. Decoding a malicious image with a zero value resulted in an arithmetic exception, which caused the program that uses the TIFF library to crash. This leads to a...