CVE-2019-17387

An authentication flaw in the AVPNCRP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS. Recent assessments: kevthehermit at March 05, 2020 9:39am UTC reported: VPN clients are commonly found ...

CVE-2019-7201

An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allow an authorized but non-privileged local user to execute arbitrary code with elevated system privileges. QNAP have already fixed this issue in QNAP NetBak...

Design/Logic Flaw

An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allow an authorized but non-privileged local user to execute arbitrary code with elevated system privileges. QNAP have already fixed this issue in QNAP NetBak...

CVE-2019-7201

An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allow an authorized but non-privileged local user to execute arbitrary code with elevated system privileges. QNAP have already fixed this issue in QNAP NetBak...

Reliable Controls LicenseManager Code Issue Vulnerability

RC-LicenseManager is a credential manager. A code issue vulnerability exists in Reliable Controls LicenseManager. The vulnerability arises from an issue with improper design during code development for a networked system or product. An attacker could use this vulnerability to insert malicious cod...

Palo Alto Networks PAN-OS CVE-2019-17437 Privilege Escalation Vulnerability

Description Palo Alto Networks PAN-OS is prone to a privilege-escalation vulnerability. An attacker can exploit this issue to obtain elevated privileges. PAN-OS 7.1 versions prior to 7.1.25, 8.0 versions prior to 8.0.20, 8.1 versions prior to 8.1.11, 9.0 versions prior to 9.0.5 are vulnerable...

PT-2019-18462 · Qnap · Qnap Netbak Replicator

Name of the Vulnerable Software and Affected Versions: QNAP NetBak Replicator versions prior to 4.5.12.1108 Description: An unquoted service path issue affects the QVssService in QNAP NetBak Replicator, allowing an authorized but non-privileged local user to execute arbitrary code with elevated...

Cisco NX-OS Software Command Injection (cisco-sa-20190306-nxos-cmdinj-1611)

According to its self-reported version, Cisco NX-OS Software is affected by a command injection vulnerability due to insufficient validation of arguments passed to certain CLI commands. An authenticated, local attacker with valid administrator credentials can exploit this by including malicious...

Cisco FXOS Software Command Injection (cisco-sa-20190306-nxos-cmdinj-1611)

According to its self-reported version, Cisco FXOS Software is affected by a command injection vulnerability due to insufficient validation of arguments passed to certain CLI commands. An authenticated, local attacker with valid administrator credentials can exploit this by including malicious...

CVE-2012-4576

FreeBSD: Input Validation Flaw allows local users to gain elevated privileges...

CVE-2012-4576

FreeBSD: Input Validation Flaw allows local users to gain elevated privileges...

Input validation

FreeBSD: Input Validation Flaw allows local users to gain elevated privileges...

CVE-2012-4576

Removed by vendor...

CVE-2012-4576

CVE-2012-4576 is described as a FreeBSD input-validation flaw that enables local privilege escalation. The connected data corroborate a Linux compatibility layer input-validation error where improper validation of Linux system-call handling can lead to memory locations being accessed, allowing lo...

Django CVE-2019-19118 Privilege Escalation Vulnerability

Description Django is prone to a privilege-escalation vulnerability. A remote attacker can exploit this issue to gain elevated privileges and perform unauthorized actions on an affected system. Django versions prior to 2.2.8 and 2.1.15 are vulnerable. Technologies Affected Djangoproject Django 2....

CVE-2019-19451

When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this launch is from a thumbnailer service, this output will usually be written to disk via the system's...

CVE-2019-19451

When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this launch is from a thumbnailer service, this output will usually be written to disk via the system's...

CVE-2019-19451

When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this launch is from a thumbnailer service, this output will usually be written to disk via the system's...

CVE-2019-19451

When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this launch is from a thumbnailer service, this output will usually be written to disk via the system's...

PT-2019-15841 · Gnome +3 · Gnome Dia +3

Name of the Vulnerable Software and Affected Versions: GNOME Dia versions prior to 2019-11-27 Description: The issue occurs when GNOME Dia is launched with a filename argument that is not a valid codepoint in the current encoding, causing it to enter an endless loop and write text to stdout. If...