12289 matches found
CVE-2019-15919
An flaw was discovered in the Linux kernel's CIFS client implementation. While issuing an SMB2write, a value can be used after it was intended to be freed when CIFS function tracing is enabled. Even though the data is used after being freed, using it to for privilege escalation does not seem...
SharPersist: Windows Persistence Toolkit in C#
Background PowerShell has been used by the offensive community for several years now but recent advances in the defensive security industry are causing offensive toolkits to migrate from PowerShell to reflective C to evade modern security products. Some of these advancements include Script Block...
CVE-2019-8461
Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially crafted DLL placed in any PATH location accessible with...
CVE-2019-8461
CVE-2019-8461 – Check Point Endpoint Security Initial Client for Windows is a local privilege escalation vulnerability affecting versions prior to E81.30. The issue arises when the client loads a DLL placed in any PATH location on a clean image without the Endpoint Client installed, allowing an a...
CVE-2019-8461
Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially crafted DLL placed in any PATH location accessible with...
CVE-2019-8461: Process Control
Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially crafted DLL placed in any PATH location accessible with...
PT-2020-9627 · Sdl +3 · Sdl +3
Name of the Vulnerable Software and Affected Versions: SDL versions prior to 1.2.15 SDL versions 2.x prior to 2.0.9 Description: A heap-based buffer overflow flaw exists while copying an existing surface into a new optimized one, due to a lack of validation while loading a BMP image. This issue...
PT-2019-17088 · Ibm · Ibm Db2 High Performance Unload
Name of the Vulnerable Software and Affected Versions: IBM DB2 High Performance Unload load for LUW versions 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 Description: The issue allows a low-privileged user to execute arbitrary code with root authority by loading arbitrary db2...
PT-2019-4180
Name of the Vulnerable Software and Affected Versions Swift versions prior to 5.1.1 Endpoint Security Initial Client for Windows affected versions not specified Description The issue concerns incorrect management of file descriptors in URLSession, potentially leading to inadvertent data disclosur...
CVE-2017-18576
The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...
CVE-2017-18576
The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...
Design/Logic Flaw
The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...
CVE-2017-18576
The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...
CVE-2017-18576
The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...
CVE-2017-18576: Improper Neutralization of Input During Web Page Generation
The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...
PT-2019-8510
Name of the Vulnerable Software and Affected Versions WordPress event-notifier plugin versions prior to 1.2.1 Description The issue concerns a cross-site scripting XSS flaw in the loading animation of the event-notifier plugin. Recommendations For versions prior to 1.2.1, update the event-notifie...
Security Bulletin: Multiple privilege escalation vulnerabilities in IBM DB2 HPU
Summary IBM DB2 High Performance Unload load privilege escalation in IBM DB2 HPU debug binary via trusted PATH and privilege escalation in IBM DB2 HPU via loading DB2 library Vulnerability Details Relevant CVE Information: CVEID: CVE-2019-4447 DESCRIPTION: IBM DB2 High Performance Unload load...
CVE-2019-15295
An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitdefender Antivirus Free 2020 versions prior to 1.0.15.138, allows an attacker to load an arbitrary DLL file from the search path...
Microsoft Outlook Elevation of Privilege Vulnerability (CNVD-2019-40535)
Microsoft Outlook is a personal information management system software with features such as sending and receiving e-mail, calendars and more. An elevation of privilege vulnerability exists in Microsoft Outlook, which arises from a failure to adequately validate the format of incoming emails as...
CVE-2019-5037
An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version 4620002. A specially crafted weave packet can cause an integer overflow and an out-of-bounds read on unmapped memory to occur, resulting in a denial of servic...