[SECURITY] Fedora 30 Update: dhcp-4.3.6-38.fc30

DHCP Dynamic Host Configuration Protocol...

The vulnerabilities of Intel Converged Security and Manageability Engine (CSME) and Intel Trusted Execution Engine (TXE) involve buffer overflows in dynamic memory, which allow attackers to expose sensitive information, cause system failures, or gain elevated privileges.

The vulnerability of the Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information, cause...

GALLIUM: Targeting global telecom

Microsoft Threat Intelligence Center MSTIC is raising awareness of the ongoing activity by a group we call GALLIUM, targeting telecommunication providers. When Microsoft customers have been targeted by this activity, we notified them directly with the relevant information they need to protect...

CVE-2019-19726

OpenBSD through 6.6 allows local users to escalate to root because a check for LDLIBRARYPATH in setuid programs can be defeated by setting a very small RLIMITDATA resource limit. When executing chpass or passwd which are setuid root, dlsetupenv in ld.so tries to strip LDLIBRARYPATH from the...

OpenBSD Local Privilege Escalation Vulnerability (CVE-2019-19726)

Qualys Research Labs discovered a local privilege escalation vulnerability in OpenBSD's dynamic loader. The vulnerability could allow local users or malicious software to gain full root privileges. OpenBSD developers have confirmed the vulnerability and released security patches in less than 3...

Qualys Security Advisory - OpenBSD Dynamic Loader Privilege Escalation

Qualys Security Advisory Local Privilege Escalation in OpenBSD's dynamic loader CVE-2019-19726 ============================================================================== Contents ============================================================================== Summary Analysis Demonstration...

DLL Hijacking Vulnerability in WeChat PC Client

WeChat is a chatting and socializing software from Shenzhen Tencent Computer System Co. A DLL hijacking vulnerability exists in the WeChat PC client, which can be exploited by attackers to execute malicious code...

McAfee Tech Check DLL Search Order Hijacking Vulnerability

McAfee Tech Check is a computer software and hardware scanning and diagnostic application from the U.S. company McAfee McAfee. McAfee Tech Check 3.0.0.17 and earlier versions contain a DLL search order hijacking vulnerability that can be exploited by a local attacker to execute arbitrary code via...

Intel Dynamic Platform and Thermal Framework CVE-2019-0134 Local Privilege Escalation Vulnerability

Description Intel Dynamic Platform and Thermal Framework is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Intel Dynamic Platform and Thermal Framework version 8.3.10208.5643 and prior are vulnerable. Technologies Affected...

EulerOS 2.0 SP2 : bind (EulerOS-SA-2019-2453)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - To provide fine-grained controls over the ability to use Dynamic DNS DDNS to update records in a zone, BIND 9 provides a feature called...

CVE-2019-19382

Max Secure Anti Virus Plus 19.0.4.020 has Insecure Permissions on the installation directory. Local attackers can replace a .exe or .dll file to achieve privilege escalation...

Intel Dynamic Platform and Thermal Framework Advisory - Lenovo Support US

Lenovo Security Advisory: LEN-29841 Potential Impact: Escalation of Privilege Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0134 Summary Description: Intel reported a potential security vulnerability in Intel Dynamic Platform and Thermal Framework which may allow...

Intel Dynamic Platform and Thermal Framework Advisory - Lenovo Support US

No description provided...

CVE-2019-15628

Trend Micro Security Consumer 2020 v16.0.1221 and below is affected by a DLL hijacking vulnerability that could allow an attacker to use a specific service as an execution and/or persistence mechanism which could execute a malicious program each time the service is started...

[SECURITY] Fedora 31 Update: bind-dyndb-ldap-11.2-2.fc31

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

Xunjie CAD Viewing Software installer is vulnerable to dll hijacking

Xunjie CAD viewing software is a CAD drawing viewing tool, can be detached from the AutoCAD environment on the DWG, DXF files for fast browsing. A dll hijacking vulnerability exists in the installation program of Xunjie CAD Viewer. An attacker can exploit the vulnerability to execute arbitrary co...

Xunjie CAD Converter installer is vulnerable to dll hijacking

Swift CAD Converter is a CAD version converter and PDF to CAD software. A dll hijacking vulnerability exists in the Swift CAD Converter installer. An attacker can exploit this vulnerability to execute arbitrary code during program installation...

Swift CAD Editor suffers from dll hijacking vulnerability

Swift CAD Editor is a CAD drawing editing software by ... Swift CAD Editor suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

DLL Hijacking Vulnerability in VV Video Community

VV Video Community is an online audiovisual entertainment platform. VV Video Community suffers from a DLL hijacking vulnerability. An attacker can exploit the vulnerability to execute arbitrary code...

Microchat v1.0.3.20 suffers from DLL hijacking vulnerability

Microchat is a new IM instant messaging chat program. Microchat v1.0.3.20 suffers from a DLL hijacking vulnerability. An attacker can exploit the vulnerability to execute arbitrary movement...