PT-2019-6410 · Phoenix · Phoenix Sct Winflash

Name of the Vulnerable Software and Affected Versions: Phoenix SCT WinFlash versions 1.1.12.0 through 1.5.74.0 Description: The issue is related to the included drivers in Phoenix SCT WinFlash, which could be used by a malicious Windows application to gain elevated privileges. The adverse impacts...

CVE-2019-3744

Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a Universal Windows Platform application by manipulating the install software package feature with a race condition and a path traversal explo...

Privilege escalation

Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a named pipe that performs binary deserialization via a process hollowing technique to inject malicous code to run an executable with elevat...

CVE-2019-3744

Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a Universal Windows Platform application by manipulating the install software package feature with a race condition and a path traversal explo...

CVE-2019-3742

Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a named pipe that performs binary deserialization via a process hollowing technique to inject malicous code to run an executable with elevat...

PT-2019-16685 · Dell · Dell/Alienware Digital Delivery

Name of the Vulnerable Software and Affected Versions: Dell/Alienware Digital Delivery versions prior to 3.5.2013 Description: The issue allows a local non-privileged malicious user to exploit a named pipe that performs binary deserialization via a process hollowing technique. This technique...

ALPINE-CVE-2019-10167

The virConnectGetDomainCapabilities libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients...

CVE-2019-12750

Symantec Endpoint Protection, prior to 14.2 RU1 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition, prior to 12.1 RU6 MP10c 12.1.7491.7002, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the...

Privilege escalation

Symantec Endpoint Protection, prior to 14.2 RU1 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition, prior to 12.1 RU6 MP10c 12.1.7491.7002, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the...

CVE-2019-12750

Symantec Endpoint Protection, prior to 14.2 RU1 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition, prior to 12.1 RU6 MP10c 12.1.7491.7002, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the...

Linux local to mention the right vulnerability(CVE-2019-13272)early warning-vulnerability warning-the black bar safety net

2019 07 on 20 December, the Linux officially fixes a local kernel to mention the right vulnerability. Through this vulnerability, the attacker may be an ordinary user permissions elevated to Root privileges. Vulnerability description When calling PTRACETRACEME, the ptracelink function will get th...

GNU patch arbitrary file upload vulnerability

GNU patch is a set of tools from the GNU Project for generating patch files. GNU patch arbitrary file upload vulnerability. An attacker can exploit this vulnerability by creating symbolic links to overwrite arbitrary files with elevated privileges...

CVE-2019-5605

In FreeBSD 11.3-STABLE before r350217, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, due to insufficient initialization of memory copied to userland in the freebsd32ioctl interface, small amounts of kernel memory may be disclosed to userland processes. This may...

CVE-2019-5605

In FreeBSD 11.3-STABLE before r350217, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, due to insufficient initialization of memory copied to userland in the freebsd32ioctl interface, small amounts of kernel memory may be disclosed to userland processes. This may...

CVE-2019-5605

Removed by vendor...

FreeBSD -- Kernel memory disclosure in freebsd32_ioctl

Problem Description: Due to insufficient initialization of memory copied to userland in the components listed above small amounts of kernel memory may be disclosed to userland processes. Impact: A user who can invoke 32-bit FreeBSD ioctls may be able to read the contents of small portions of kern...

Security Bulletin: Rational Build Forge Security Advisory for Apache HTTP Server (CVE-2019-0196;CVE-2019-0197;CVE-2019-0211;CVE-2019-0215;CVE-2019-0217; and CVE-2019-0220)

Summary Apache HTTP Server has security vulnerabilities that allows a remote attacker to exploit the application. Respective security vulnerabilities are discussed in detail in the subsequent sections. Vulnerability Details This section includes the vulnerability details that affects the Rational...

The vulnerability of the Windows Audio service on the Windows operating system allows a perpetrator to execute arbitrary code with elevated privileges.

The vulnerability of the Windows Audio service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges through a specially created application...

The vulnerability of the Microsoft SharePoint software package arises from insufficient cleaning of data provided by users, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint software package is related to insufficient cleaning of data provided by users. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute cross-site scripting attacks with elevated privileges using a specially created...

The vulnerability of the Windows Audio service on the Windows operating system allows a perpetrator to execute arbitrary code with elevated privileges.

The vulnerability of the Windows Audio service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges through a specially created application...