CVE-2019-7246

An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes a wrmsr instruction and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution an...

CVE-2019-7246

An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes a wrmsr instruction and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution an...

CVE-2019-7246

The CVE-2019-7246 entry concerns the AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility driver atillk64.sys (version 5.11.9.0). The vulnerability arises from improper filtering of Model Specific Registers (MSR) and exposure of a wrmsr instruction, allowing arbitrary MSR writes that...

CVE-2019-7246: Undefined Security Weakness

An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes a wrmsr instruction and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution an...

PT-2020-11238

Name of the Vulnerable Software and Affected Versions AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility version 5.11.9.0 Description An issue was discovered in the atillk64.sys driver, which exposes a wrmsr instruction and does not properly filter the Model Specific Register MSR...

Konica Minolta FTP Utility 1.0 Denial Of Service

Exploit Title: Konica Minolta FTP Utility v1.0 - 'LIST' Denial of Service PoC v2 Date: 05-16-2020 Found by: Alvaro J. Gene Socket0x03 Email: Socket0x03 at teraexe dot com Website: www dot teraexe dot com Vulnerable Application: Konica Minolta FTP Utility Version: 1.0 Server: FTP Server Vulnerable...

Sumac Utility Privilege Escalation

The vulnerability of the Sumac utility component is related to the lack of mechanisms for granting permissions, privileges, and managing access control. Exploiting this vulnerability could allow a perpetrator to trigger the octath service...

[SECURITY] Fedora 30 Update: pxz-4.999.9-19.beta.20200421git.fc30

Parallel XZ is a compression utility that takes advantage of running XZ compression simultaneously on different parts of an input file on multiple cores and processors. This significantly speeds up compression time...

[SECURITY] Fedora 32 Update: pxz-4.999.9-19.beta.20200421git.fc32

Parallel XZ is a compression utility that takes advantage of running XZ compression simultaneously on different parts of an input file on multiple cores and processors. This significantly speeds up compression tim e...

[SECURITY] Fedora 31 Update: pxz-4.999.9-19.beta.20200421git.fc31

Parallel XZ is a compression utility that takes advantage of running XZ compression simultaneously on different parts of an input file on multiple cores and processors. This significantly speeds up compression tim e...

CVE-2020-5873: Undefined Security Weakness

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.1-11.6.5 and BIG-IQ 5.2.0-7.1.0, a user associated with the Resource Administrator role who has access to the secure copy scp utility but does not have access to Advanced Shell bash can execute arbitrary commands...

IBM WebSphere Application Server 7.0.0.0 <= 7.0.0.45 / 8.0.0.0 <= 8.0.0.15 / 8.5.0.0 <= 8.5.5.14 / 9.0.0.0 <= 9.0.0.9 Cross-Site Scripting Vulnerability

A cross-site scripting XSS vulnerability exists in WebSphere Application Server using SIBMsgMigration Utility due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this, by embeding arbitrary JavaScript code in the Web UI thu...

CVE-2019-16011 Cisco IOS XE SD-WAN Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to...

Cisco IOS XE SD-WAN Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to...

Fun-map Resource Management Error Vulnerability

fun-map is a Clojure string mapping utility program. A security vulnerability exists in fun-map 3.3.1 and earlier versions. The vulnerability can be exploited to add or modify Object.prototype properties via the "assocInM" function...

File type detection utility Heap Buffer Overflow DoS

The vulnerability of the docorenote function in the File type detection utility is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

libsndfile: stack-based buffer overflow in sndfile-deinterleave utility

A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave...

Moderate: Red Hat Security Advisory: sudo security, bug fix, and enhancement update

An update for sudo is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Low: unzip security update

The unzip utility is used to list, test, and extract files from zip archives. Security Fixes: unzip: overlapping of files in ZIP container leads to denial of service CVE-2019-13232 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

Moderate: exiv2 security, bug fix, and enhancement update

The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The following packages have been upgraded to a later upstream version: exiv2 0.27.2. BZ1651917 Security Fixes: exiv2: infinite loop and hang in...