PostgreSQL Information Disclosure Vulnerability (CNVD-2019-31336)

PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, and so on. A security vulnerability exists in PostgreSQL versions 9.4 through...

KLA11539 Multiple vulnerabilities in PostgreSQL

Multiple vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A vulnerability in PostgreSQL can be exploited to execute...

Vulnerability in packaging (CVE-2019-10211)

Windows installer bundled OpenSSL executes code from unprotected directory When the database server or libpq client library initializes SSL, libeay32.dll attempts to read configuration from a hard-coded directory. Typically, the directory does not exist, but any local user could create it and...

MSI installer for Python code execution vulnerability

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, supports multiple platforms, etc. MSI installer for Python is a Windows-based Python installer. A security vulnerability exists in MSI...

PT-2019-13316 · Python · Python

Name of the Vulnerable Software and Affected Versions: Python versions prior to 2.7.17 Python versions 3.x prior to 3.5 Description: The MSI installer for Python on Windows defaults to the C:Python27 directory, making it easier for local users to deploy Trojan horse code. The vendor's position is...

The vulnerability of the Windows Installer component in Windows operating systems, related to object handling errors in memory, allows attackers to exploit their privileges.

The vulnerability of the Windows Installer component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2019-0973

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then...

CVE-2019-0973

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then...

Privilege escalation

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Installer...

CVE-2019-0973 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2019-0973

CVE-2019-0973 affects the Windows Installer. The issue stems from improper input sanitization that enables insecure library loading, leading to elevation of privilege. A locally authenticated attacker could execute arbitrary code with elevated system privileges, potentially installing programs, v...

Microsoft Windows Multiple Vulnerabilities (KB4503276)

This host is missing a critical security update according to Microsoft KB4503276 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Windows Installer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then...

KB4503284: Windows 10 Version 1709 June 2019 Security Update

The remote Windows host is missing security update 4503284. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC. An attacker who successfully exploited this...

KB4503269: Windows 7 and Windows Server 2008 R2 June 2019 Security Update

The remote Windows host is missing security update 4503269 or cumulative update 4503292. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the Windows Event Viewer eventvwr.msc when it improperly parses XML input containing a reference to...

KB4503286: Windows 10 Version 1803 June 2019 Security Update

The remote Windows host is missing security update 4503286. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC. An attacker who successfully exploited this...

KLA11874 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...

PostgreSQL 9.4.x < 9.4.22 / 9.5.x < 9.5.17 / 9.6.x < 9.6.13 / 10.x < 10.8 / 11.x < 11.3 Multiple vulnerabilities

The version of PostgreSQL installed on the remote host is 9.4.x prior to 9.4.22, 9.5.x prior to 9.5.17, 9.6.x prior to 9.6.13, 10.x prior to 10.8, or 11.x prior to 11.3. It is, therefore, affected by multiple vulnerabilities. - A remote code execution vulnerability exists in both, the BigSQL and...

PostgreSQL Code Execution Vulnerability (CNVD-2019-16484)

PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, and so on. A security vulnerability exists in PostgreSQL because the...

PostgreSQL Code Execution Vulnerability (CNVD-2019-16483)

PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, and so on. A security vulnerability exists in PostgreSQL because the...