McAfee Total Protection Elevation of Privilege Vulnerability

McAfee Total Protection is a suite of antivirus software from the American company McAfee McAfee. A security vulnerability exists in McAfee Total Protection for Mac OS versions prior to 4.6, which originates from the program not properly protecting temporary files. A local attacker can exploit th...

CVE-2019-3617

Privilege escalation vulnerability in McAfee Total Protection ToPS for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files...

CVE-2019-3617

Privilege escalation vulnerability in McAfee Total Protection ToPS for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files...

Privilege escalation

Privilege escalation vulnerability in McAfee Total Protection ToPS for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files...

PT-2020-10905

Name of the Vulnerable Software and Affected Versions McAfee Total Protection ToPS for Mac OS versions prior to 4.6 Description The issue allows local users to gain root privileges via incorrect protection of temporary files. This is a privilege escalation vulnerability. Recommendations For...

CVE-2019-3617: Improper Privilege Management

Privilege escalation vulnerability in McAfee Total Protection ToPS for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files...

Ubuntu 19.10 : Apache Ant vulnerability (USN-4380-1)

It was discovered that Apache Ant created temporary files with insecure permissions. An attacker could use this vulnerability to read sensitive information leaked into /tmp, or potentially inject malicious code into a project that is built with Apache Ant. Note that Tenable Network Security has...

CVE-2020-9291

An Insecure Temporary File vulnerability in FortiClient for Windows 6.2.1 and below may allow a local user to gain elevated privileges via exhausting the pool of temporary file names combined with a symbolic link attack...

CVE-2020-9291

An Insecure Temporary File vulnerability in FortiClient for Windows 6.2.1 and below may allow a local user to gain elevated privileges via exhausting the pool of temporary file names combined with a symbolic link attack...

PT-2020-5574

Name of the Vulnerable Software and Affected Versions FortiClient for Windows versions 6.2.1 and below Description The issue is related to the insecure use of temporary files in FortiClient for Windows. Exploitation of this issue may allow an attacker to gain elevated privileges, potentially...

PHP 7.2.x < 7.2.31 / 7.3.x < 7.3.18, 7.4.x < 7.4.6 Denial of Service (DoS)

According to its self-reported version number, the version of PHP running on the remote web server is 7.2.x prior to 7.2.31, 7.3.x prior to 7.3.18 or 7.4.x prior to 7.4.6. It is, therefore, affected by a denial of service DoS vulnerability in its HTTP file upload component due to a failure to cle...

CVE-2019-11048

In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleanin...

Design/Logic Flaw

In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleanin...

UBUNTU-CVE-2019-11048

In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleanin...

CVE-2019-11048

CVE-2019-11048 affects PHP mainline releases where HTTP file uploads are allowed: PHP 7.2.x below 7.2.31, 7.3.x below 7.3.18, and 7.4.x below 7.4.6. The flaw allows overly long filenames or field names to trigger memory allocation that exceeds limits, causing the engine to stop processing and fai...

CVE-2019-11048

Removed by vendor...

CVE-2019-11048

In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleanin...

CVE-2019-11048: Uncontrolled Resource Consumption

In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleanin...

Pillow Temporary file name leakage

The 1 JpegImagePlugin.py and 2 EpsImagePlugin.py scripts in Python Image Library PIL 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it easier for local users to conduct symlink attacks by listing the processes...

PT-2020-4630 · Php +8 · Php +8

Name of the Vulnerable Software and Affected Versions: PHP versions 7.2.x through 7.2.30 PHP versions 7.3.x through 7.3.17 PHP versions 7.4.x through 7.4.5 Description: The issue is related to an integer overflow buffer in the PHP language interpreter. Exploitation of this issue could allow a...