Huawei EulerOS: Security Advisory for shadow-utils (EulerOS-SA-2018-1169)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-16270

The CVE concerns Samsung Galaxy Gear series prior to build RE2, where the hcidump utility lacks privilege/permission restrictions. The vulnerability allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path, indicating exposure of sensitive Bluetooth data. The provide...

CVE-2019-14596

Improper access control in the installer for IntelR Chipset Device Software INF Utility before version 10.1.18 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2019-14596: Undefined Security Weakness

Improper access control in the installer for IntelR Chipset Device Software INF Utility before version 10.1.18 may allow an authenticated user to potentially enable denial of service via local access...

Intel Fixes High-Severity Flaw in Performance Analysis Tool

Intel is warning of a high-severity vulnerability in its performance analysis tool called Intel VTune Profiler. If exploited the flaw allows an adversary to perform a privilege escalation attack, giving them elevated and unauthorized system access to a targeted system. The VTune Profiler, formerl...

PT-2020-1645

Name of the Vulnerable Software and Affected Versions IntelR Chipset Device Software INF Utility versions prior to 10.1.18 Description The issue is related to improper access control in the installer, which may allow an authenticated user to potentially enable denial of service via local access...

Android ashmem Read-Only Bypasses Exploit

Android suffers from ashmem read-only bypass vulnerabilities via remapfilepages and ASHMEMUNPIN. Android: ashmem readonly bypasses via remapfilepages and ASHMEMUNPIN This bug report describes two ways in which an attacker can modify the contents of a read-only ashmem fd. I'm not sure at this poin...

Unspecified vulnerability in rConfig

rConfig is an open source network configuration management utility . A security vulnerability exists in rConfig version 3.9.3. An attacker can exploit this vulnerability to bypass local security restrictions...

F5 Networks BIG-IP : BIG-IP TMUI XSS vulnerability (K22441651)

A reflected cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface TMUI, also known as the BIG-IP Configuration utility.CVE-2019-6657 Impact An attacker may exploit this vulnerability usinga crafted URL to a reflected cross-site...

F5 Networks BIG-IP : NodeJS vulnerability (K63025104)

The Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform remote code execution. An attack is possible from malicious websites open in a web browser on the same computer, or another computer with network access to the computer running the...

CVE-2012-4980

Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assisted attackers to execute arbitrary code...

Stack overflow

Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assisted attackers to execute arbitrary code...

CVE-2012-4980

The CVE-2012-4980 entry refers to a stack-based buffer overflow in Toshiba ConfigFree’s CFProfile.exe (CF7 file parsing). Documents specify vulnerabilities in the CF7 file format, notably the profileName and comment fields, that could allow a user-assisted attacker to run arbitrary code on Window...

CVE-2012-4980

Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assisted attackers to execute arbitrary code...

CVE-2012-4980: Out-of-bounds Write

Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assisted attackers to execute arbitrary code...

PT-2019-6783

Name of the Vulnerable Software and Affected Versions Toshiba ConfigFree Utility version 8.0.38 Description The issue is related to multiple stack-based buffer overflows in CFProfile.exe, which allows user-assisted attackers to execute arbitrary code. Recommendations For Toshiba ConfigFree Utilit...

CVE-2019-6129

A memory leak was found in the pngcp.c utility of libpng. The pngcp utility fails to free the pnginfo structure allocated by pngcreateinfostruct before exiting...

UBUNTU-CVE-2019-19907

HrAddFBBlock in libfreebusy/freebusyutil.cpp in Kopano Groupware Core before 8.7.7 allows out-of-bounds access, as demonstrated by mishandling of an array copy during parsing of ICal data...

CVE-2019-14605

The CVE-2019-14605 affects Intel's SCS Platform Discovery Utility (all versions). The root cause is improper permissions in the installer, enabling an authenticated local user to potentially escalate privileges (local, low complexity, privilege requirement). Impact includes potentially elevated p...

CVE-2019-14605: Incorrect Default Permissions

Improper permissions in the installer for the IntelR SCS Platform Discovery Utility, all versions, may allow an authenticated user to potentially enable escalation of privilege via local attack...