Design/Logic Flaw

Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Backup before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in t...

Design/Logic Flaw

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Bitdefender Total Security 21.0.24.62. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

BMC Patrol Elevation of Privilege Vulnerability

BMC Patrol is a suite of enterprise-class server management tools. A security vulnerability in BMC Patrol mcmnm allows local attackers to exploit the vulnerability by submitting a special libmcmclnx.so with elevated privileges...

CVE-2017-11160

Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows local attackers to execute arbitrary code and conduct DLL hijacking attack via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in the current worki...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows local attackers to execute arbitrary code and conduct DLL hijacking attack via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in the current worki...

CVE-2017-11160

Summary: CVE-2017-11160 affects the Synology Assistant installer for Windows prior to version 6.1-15163, enabling local code execution and DLL hijacking when a Trojan horse DLL is loaded from the current working directory. The vulnerable component is the installer used by Synology Assistant; the ...

Cisco Elastic Services Controller Information Disclosure Vulnerability (CNVD-2017-220950)

Cisco Elastic Services Controller ESC is an open source modular system from Cisco USA. An information disclosure vulnerability exists in Cisco ESC, which stems from the program failing to properly protect sensitive log files. A local attacker can exploit this vulnerability to access sensitive...

The vulnerability of the configuration of the autonomous configuration device for visualization and control systems called “U.motion Builder” arises from system configuration errors, allowing a perpetrator to execute arbitrary code.

The vulnerability of the configuration of the autonomous configuration tool for the “smart home” visualization and control system, U.motion Builder, exists due to a processing error in the system’s configuration parameters. Exploiting this vulnerability allows an attacker who operates locally to...

Xamarin Studio Privilege Escalation Vulnerability - Mac OS X

Xamarin Studio is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xamarin:studio";...

Fuji Electric Monitouch V-SFT Insecure Configuration Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate their privileges on vulnerable installations of Fuji Electric Monitouch V-SFT. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists withi...

Microsoft Windows CLFS Driver Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Common Log...

Microsoft Volume Manager Extension Driver CVE-2017-8668 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based...

(Pwn2Own) Microsoft Windows Palette Object Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

Apple iTunes iPodService Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple iTunes. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the...

The vulnerability of the CLI component of the Cisco IOS operating system, allowing a hacker to execute arbitrary commands

The vulnerability of the Cisco IOS operating system’s CLI component exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor, operating locally, to execute arbitrary commands with root privileges...

(Pwn2Own) Microsoft Windows NtUserLinkDpiCursor Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

Schneider Electric Pelco VideoXpert Elevation of Privilege Vulnerability

VideoXpert is a video management solution designed for scalability to fit any size on-demand surveillance operation. An elevation of privilege vulnerability exists in Schneider Electric Pelco VideoXpert that could allow a local attacker to elevate privileges and execute arbitrary code...

(Pwn2Own) Microsoft Windows win32kfull CopyOutputString Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

QEMU debug logging stack buffer overflow vulnerability

QEMU is an open source emulator software. Qemu supports usb-redirect with a stack buffer overflow vulnerability in debug logging, which allows local attackers to exploit the vulnerability by submitting specially crafted requests to crash a QEMU instance...

(Pwn2Own) Microsoft Windows CLFS Driver Uninitialized Memory Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Common Log...