Ubuntu: Security Advisory (USN-4200-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

splwow64.exe Privilege Escalation

The vulnerability of the executable file splwow64.exe in the Windows operating system is related to errors in call handling. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Authentication Privilege Escalation

The vulnerabilities of Microprogramming Software: Intel Converged Security and Manageability Engine CSME, Intel Trusted Execution Engine TXE, and Intel Dynamic Application Loader DAL are related to authentication errors. Exploiting these vulnerabilities can allow attackers to enhance their...

Windows Data Sharing Service Privilege Escalation

The vulnerability of the Windows Data Sharing Service in the Windows operating system is related to file handling errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

DirectWrite Unprotected Access

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created web page or document...

Security Component Privilege Escalation

The vulnerability of the Security component in the Symfony software development and web application management framework is related to session management errors. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

CVE-2015-3166

The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified impact via unknown vectors, a...

CVE-2015-3166

The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified impact via unknown vectors, a...

CVE-2015-3166

CVE-2015-3166 affects PostgreSQL; the snprintf implementation fails to properly handle errors from system calls, which can lead to information disclosure or other unspecified impact via out-of-memory scenarios. Affected versions include PostgreSQL releases before 9.0.20, 9.1.x before 9.1.16, 9.2....

CVE-2015-1607

kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service invalid read operation via a crafted keyring file, related to sign extensions and "memcpy with overlappi...

glibc security update

2.28-72.0.1 - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag - add an ASIMD variant of strlen for falkor - Orabug: 2700101. - Modify glibc-ora28849085.patch so it works with RHCK kernels. - Orabug: 28849085. - Make IOfunlockfile match funlockfile and...

GraphicsMagick Heap Buffer Overflow DoS

The vulnerability of the ReadGIFImage function coder/gif.c in the cross-platform graphics library GraphicsMagick and the console-based graphic editor ImageMagick exists due to errors in object handling in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

CVE-2019-11156

Logic errors in IntelR PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable escalation of privilege, denial of service, and information disclosure via local access...

Information disclosure

Logic errors in IntelR PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable escalation of privilege, denial of service, and information disclosure via local access...

CVE-2019-11156

Summary: CVE-2019-11156 affects Intel PROSet/Wireless WiFi Software before version 21.40. The issue is described as logic errors that may allow an authenticated, local attacker to escalate privileges, cause a denial of service, and disclose information. Affected software: Intel PROSet/Wireless Wi...

CVE-2019-11156

Logic errors in IntelR PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable escalation of privilege, denial of service, and information disclosure via local access...

CVE-2019-11156: Undefined Security Weakness

Logic errors in IntelR PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable escalation of privilege, denial of service, and information disclosure via local access...

PT-2019-3950

Name of the Vulnerable Software and Affected Versions Windows Modules Installer Service affected versions not specified Description The issue is related to the improper disclosure of file information by the Windows Modules Installer Service, potentially allowing unauthorized access to protected...

EulerOS 2.0 SP8 : kernel (EulerOS-SA-2019-2106)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the...

VLC TY demux plugin Code Execution

The vulnerability of the TY demux plugin ty.c in the Media Player software VideoLAN VLC is related to errors in number processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted .ty file...