5478 matches found
CVE-2019-11163
Insufficient access control in a hardware abstraction driver for IntelR Processor Identification Utility for Windows before version 6.1.0731 may allow an authenticated user to potentially enable escalation of privilege, denial of service or information disclosure via local access...
CVE-2019-11163
CVE-2019-11163 affects Intel® Processor Identification Utility for Windows* prior to version 6.1.0731. The issue is insufficient access control in a hardware abstraction driver, potentially allowing an authenticated user to escalate privilege, cause denial of service, or disclose information via ...
DEBIAN-CVE-2018-20969
doedscript in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter...
Security Bulletin: A vulnerability in IBM Java Runtime affects IBM Installation Manager and IBM Packaging Utility
Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 7 used by IBM Installation Manager and IBM Packaging Utility. The IBM Installation Manager and IBM Packaging Utility have addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-2684 DESCRIPTION: An unspecified...
Microsoft Windows Text Services Framework MSCTF - Multiple Vulnerabilities
The msctf subsystem is part of the Text Services Framework, The TSF manages things like input methods, keyboard layouts, text processing and so on. There are two main components, the ctfmon server and the msctf client. The ctfmon service creates an ALPC port in a well known location, to which...
Microsoft Windows Text Services Framework MSCTF - Multiple Vulnerabilities
The msctf subsystem is part of the Text Services Framework, The TSF manages things like input methods, keyboard layouts, text processing and so on. There are two main components, the ctfmon server and the msctf client. The ctfmon service creates an ALPC port in a well known location, to which...
chromium-browser: Object leak of utility functions
Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...
NewStart CGSL MAIN 5.04 : procmail Vulnerability (NS-SA-2019-0005)
The remote NewStart CGSL host, running version MAIN 5.04, has procmail packages installed that are affected by a vulnerability: - A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send a specially crafted email that, when processed by formail, coul...
Applocker Evasion - Microsoft .NET Assembly Registration Utility
This module will assist you in evading Microsoft Windows Applocker and Software Restriction Policies. This technique utilises the Microsoft signed binaries RegAsm.exe or RegSvcs.exe to execute user supplied code. This module requires Metasploit: https://metasploit.com/download Current source:...
Privilege Escalation
procps-ng is vulnerable to privilege escalation. The top utility is run with HOME unset in an attacker-controlled directory, the attacker can exploit one of several vulnerabilities in the configfile to escalate the privileges...
KRF - A Kernelspace Randomized Faulter
KRF is a K ernelspace R andomized F aulter. It currently supports the Linux and FreeBSD kernels. What? Fault injection is a software testing technique that involves inducing failures "faults" in the functions called by a program. If the callee has failed to perform proper error checking and...
libjpeg: "cjpeg" utility large loop because read_pixel in rdtarga.c mishandles EOF
libjpeg 9c has a large loop because readpixel in rdtarga.c mishandles EOF...
patch: Out-of-bounds access in pch_write_line function in pch.c
A heap-based out-of-bounds read flaw was found in the way the patch utility parsed patch files. An attacker could potentially use this flaw to crash the patch utility by tricking it into processing crafted patch files...
patch: Double free of memory in pch.c:another_hunk() causes a crash
A double-free flaw was found in the way the patch utility processed patch files. An attacker could potentially use this flaw to crash the patch utility by tricking it into processing crafted patches...
The vulnerability of the unixcmd utility in the Virtual Distributed Ethernet virtual network creation package allows a attacker to cause a service failure.
The vulnerability of the unixcmd utility, a tool for creating compatible virtual networks using Virtual Distributed Ethernet, stems from segmentation errors. Exploiting this vulnerability could allow an attacker to cause a service failure by entering a specially crafted sequence of data into the...
The vulnerability of the __strlen_sse2_pminub function in the infotocap utility from the ncurses-bin package allows a hacker to induce a service failure.
The vulnerability of the strlensse2pminub function located in the file sysdeps/x8664/multiarch/strlen-sse2-pminub.S:50 in the infotocap utility from the ncurses-bin package is related to errors in pointer arithmetic. Exploiting this vulnerability could allow an attacker to cause a system failure ...
The vulnerability of the ppdpo utility in the cups-ppdc package, related to buffer overflow errors, allows a hacker to cause a service failure.
The vulnerability of the ppdpo utility in the cups-ppdc package is related to buffer overflow errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted script...
The vulnerability of the `ppdcSource::find_variable` function in the workmanir utility from the libirman-dev package allows a hacker to cause a service failure.
The vulnerability of the ppdcSource::findvariable function /usr/lib/x8664-linux-gnu/libcupsppdc.so.1 in the workmanir utility from the libirman-dev package is related to buffer overflow vulnerabilities 0x00007ffff7bca37a. Exploiting this vulnerability may allow an attacker to cause a service...
The vulnerability of the data tracking utility’s peekfd function, caused by segmentation errors, allows a hacker to trigger a service failure.
The vulnerability of the data tracking utility’s peekfd function is caused by segmentation errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data in the command line...