Comodo Security Comodo Security Solutions Antivirus Buffer Overflow Vulnerability

Comodo Security Solutions Antivirus is a suite of antivirus software from the American company Comodo Security Solutions. The software is mainly used to protect against computer viruses, malware and other Internet threats. A buffer overflow vulnerability exists in Comodo Security Solutions...

Rapid7 Nexpose InsightVM Security Console Cross-Site Request Forgery Vulnerability

Rapid7 Nexpose InsightVM Security Console is a local vulnerability scanning program from Rapid7 USA. A cross-site request forgery vulnerability exists in Rapid7 Nexpose InsightVM Security Console versions 6.5.0 through 6.5.68. The vulnerability stems from a WEB application that does not adequatel...

Cisco Advanced Malware Protection for Endpoints for Windows Command Injection Vulnerability

Cisco Advanced Malware Protection AMP for Endpoints for Windows is a Windows-based endpoint security solution from Cisco. The product mainly has advanced threat prevention, monitoring and response features. A command injection vulnerability exists in Cisco?AMP for Endpoints 6.2.3.10807030519 and...

Microsoft Windows Audio Service Local Elevation of Privilege Vulnerability (CNVD-2019-24848)

The Microsoft Windows operating system is a set of operating systems developed by Microsoft Corporation in the United States. An elevation of privilege vulnerability exists locally in Microsoft Windows Audio Service, which can be exploited by an attacker to perform privileged operations in the we...

Microsoft Windows Audio Service Local Elevation of Privilege Vulnerability (CNVD-2019-24847)

The Microsoft Windows operating system is a set of operating systems developed by Microsoft Corporation in the United States. An elevation of privilege vulnerability exists locally in Microsoft Windows Audio Service, which can be exploited by an attacker to perform privileged operations in the we...

Microsoft Windows Win32k CVE-2019-0814 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

Microsoft Windows Win32k CVE-2019-0848 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

Denial of service

An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can send malicious data to the root-listening service, causing the application to terminate and become unavailable...

CVE-2018-4051

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally create directories and subdirectories on the root file system, as well as change the permissions of existing directories...

CVE-2018-4052

An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user...

HP Support Assistant Authorization Issues Vulnerability

HP Support Assistant is a suite of solutions from Hewlett-Packard HP in the United States that provides support and other features for PCs and printers. A security vulnerability exists in HP Support Assistant versions prior to 8.7.50.3. A local attacker could exploit the vulnerability to execute...

Pixar Renderman Input Validation Vulnerability (CNVD-2019-42872)

Pixar Renderman is a rendering application used in animation and movie production. An input validation vulnerability exists in the Installation Assistant tool in version 22.2.0 of Pixar Renderman for Mac OS X-based platforms. A local attacker can exploit the vulnerability to elevate privileges to...

IBM SDK, Java Technology Edition Information Disclosure Vulnerability

IBM SDK, Java Technology Edition is a software development kit for Java application development from IBM, USA. A security vulnerability exists in version 8 of the IBM SDK, Java Technology Edition for AIX-based platforms. A local attacker can exploit the vulnerability to inject code and elevate...

Apache Spark Local Mobilization Vulnerability

Apache Spark is a data processing engine that supports acyclic data streaming and in-memory computation. A local elevated privilege vulnerability exists in Apache Spark. An attacker can exploit this vulnerability to gain elevated privileges...

McAfee True Key Microsoft Windows Client Local Information Disclosure Vulnerability

McAfee True Key TK is an authentication application from the American company McAfee. The program supports features such as facial information recognition and fingerprint recognition. A security vulnerability exists in the Microsoft Windows client in McAfee TK 3.1.9211.0 and earlier versions. A...

Linux kernel local privilege escalation vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the program's lack of an 'accessok' check. The vulnerability can be exploited by an attacker to...

ASUS Aura Sync Arbitrary Code Execution Vulnerability

ASUS Aura Sync is a suite of lighting management software from ASUS. An arbitrary code execution vulnerability exists in ASUS Aura Sync version 1.07.22. A local attacker can exploit this vulnerability to execute arbitrary ring-0 code...

Privilege escalation

vRealize Operations 7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6.1.11286876 contains a local privilege escalation vulnerability due to improper permissions of support scripts. Admin user of the vROps application with shell access may exploit this issue to elevate th...

CVE-2018-18860

A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-permissive configuration settings and a SUID binary, an attacker is able to execute arbitrary binaries as root...

CVE-2018-2489

Locally, without any permission, an arbitrary android application could delete the SSO configuration of SAP Fiori Client. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version...