Design/Logic Flaw

Dynamic loading of services in the backup and restore SDK leads to elevated privileges, affected product is com.coloros.codebook V2.0.05493e40200722...

CVE-2020-11829

Dynamic loading of services in the backup and restore SDK leads to elevated privileges, affected product is com.coloros.codebook V2.0.05493e40200722...

CVE-2020-11829

CVE-2020-11829 affects com.coloros.codebook V2.0.0_5493e40_200722. Dynamic loading of services in the backup and restore SDK leads to elevated privileges (Partial confidentiality, integrity, and availability impact per CVSS). No exploit details or fixes are provided in the connected documents. Th...

IBM DB2 代码问题漏洞

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 suffers from an arbitrary code execution vulnerability that can be exploited by an attacker to...

Trend Micro Security 2020 Local Elevation of Privilege Vulnerability

Trend Micro Security 2020 is a suite of computer security protection software from Trend Micro. Trend Micro Security 2020 Consumer suffers from a local elevation of privilege vulnerability that can be exploited by an attacker by placing a malicious DLL in a local directory, which can lead to...

November 19, 2020—KB4586839 (OS Build 17763.1613) Preview

None None...

CVE-2020-27697

Trend Micro Security 2020 Consumer contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a non-protected location with high privileges symlink attack which can lead to obtaining administrative privileges during the installation of the product...

Trend Micro Security 2020 代码问题漏洞

Trend Micro Security 2020 is a suite of computer security protection software from Trend Micro. Trend Micro Security 2020 Consumer suffers from a local elevation of privilege vulnerability that can be exploited by an attacker by placing a malicious DLL in a local directory, which can lead to...

Trend Micro Security 2020 后置链接漏洞

Trend Micro Security 2020 is a suite of computer security protection software from Trend Micro. Trend Micro Security 2020 Consumer has a security vulnerability that can be exploited by an attacker by placing a malicious DLL in an unprotected location and high privileges symbolic link attack, whic...

Dll Hijacking Vulnerability in Shoos Flash Wizard (Windows Client)

Shock Wave Flash Wizard is a SWF decompiler that not only captures, decompiles, views and extracts Shock Wave Flash movies .swf and .exe format files, but also converts SWF format files to FLA format files. A dll hijacking vulnerability exists in Shock Wave Flash Wizard Windows client. An attacke...

The vulnerability of the Google Chrome browser’s WebUI user interface allows a hacker to execute arbitrary code.

The vulnerability of the WebUI user interface of Google Chrome is related to the overflow of buffers in the dynamic memory during the processing of HTML content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

CVE-2020-26962

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox 83...

Cyclone PDF is vulnerable to DLL hijacking

Cyclone PDF is a PDF reading tool. Cyclone PDF has a DLL hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

License Star Free Edition has a dll hijacking vulnerability

Certificate Star is a professional full-featured ID photo production and editing software, the realization of the intelligent removal of skin oil light, the certificate clothing replacement technology at the same time to support online shooting: support for webcams and cameras that can be online...

Multiple vulnerabilities fixed in Intel systems

Intel has fixed several vulnerabilities in Converged Security and Manageability Engine CSME, Server Platform Services SPS, Trusted Execution Engine TXE, Dynamic Application Loader DAL, Active Management Technology AMT and Standard Manageability ISM. Malicious parties can exploit the vulnerabiliti...

CVE-2020-8753

Out-of-bounds read in DHCP subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2020-12306

Incorrect default permissions in the IntelR RealSenseTM D400 Series Dynamic Calibration Tool before version 2.11, may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Incorrect default permissions in the IntelR RealSenseTM D400 Series Dynamic Calibration Tool before version 2.11, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12306

The CVE-2020-12306 issue affects the Intel RealSense D400 Series Dynamic Calibration Tool prior to version 2.11. The root cause is incorrect default permissions, which may allow an authenticated local user to escalate privileges. Publicly available details confirm the affected product and vulnera...

CVE-2020-12306

Incorrect default permissions in the IntelR RealSenseTM D400 Series Dynamic Calibration Tool before version 2.11, may allow an authenticated user to potentially enable escalation of privilege via local access...