Adobe Dreamweaver Privilege Escalation Vulnerability (APSB19-40) - Windows

Adobe Dreamweaver is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2019-12865

Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access PIA VPN Client version v82 for Linux Description A local, authenticated attacker could exploit this issue to run arbitrary code with elevated privileges. The root runner.64 binary, which is setuid roo...

UBUNTU-CVE-2019-12471

Wikimedia MediaWiki 1.30.0 through 1.32.1 has XSS. Loading user JavaScript from a non-existent account allows anyone to create the account, and perform XSS on users loading that script. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...

Acrunnt.exe Code Execution

The vulnerability of the Acrunnt.exe executable of the information protection tool Akord-Win64 relates to deficiencies in the mechanism for calling system libraries. Exploiting this vulnerability allows a perpetrator to execute arbitrary code using a specially crafted DLL library, by placing it a...

CVE-2019-1932

A vulnerability in Cisco Advanced Malware Protection AMP for Endpoints for Windows could allow an authenticated, local attacker with administrator privileges to execute arbitrary code. The vulnerability is due to insufficient validation of dynamically loaded modules. An attacker could exploit thi...

VMware Workstation Privilege Escalation

The vulnerability of VMware Workstation’s virtualization platform is related to errors during the loading of DLL files. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

CVE-2019-13208

WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0...

CVE-2019-13208

WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0...

Privilege escalation

WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0...

CVE-2019-13208

WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0...

CVE-2019-13208

The CVE-2019-13208 vulnerability affects Waves MAXX Audio: WavesSysSvc64.exe (v1.9.29.0) suffers privilege escalation due to DLL side loading caused by the General registry key granting Full Control to the Users group. This is a local escalation scenario with potential high impact as described in...

DEBIAN-CVE-2019-5052

An exploitable integer overflow vulnerability exists when loading a PCX file in SDL2image 2.0.4. A specially crafted file can cause an integer overflow, resulting in too little memory being allocated, which can lead to a buffer overflow and potential code execution. An attacker can provide a...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound. An exploitable integer overflow vulnerability exists when loading a PCX file in SDL2image 2.0.4. A specially crafted file can cause an integer overflow, resulting in too little memory being allocated, whi...

PT-2019-13182

Name of the Vulnerable Software and Affected Versions Waves MAXX Audio version 1.9.29.0 Description The issue allows for privilege escalation due to the General registry key having Full Control access for the Users group, which can lead to DLL side loading through WavesSysSvc64.exe. Recommendatio...

CVE-2019-13208: Incorrect Permission Assignment for Critical Resource

WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0...

KLA12055 ACE vulnerability in Cisco Jabber

A loading mechanism vulnerability was found in Cisco Jabber. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Cisco Jabber for Windows DLL Preloading Vulnerability Exploitation Related products Cisco-Jabber CVE list CVE-2019-1855 high Solution Update t...

PT-2019-16892 · Ibm · Ibm Spectrum Protect Storage Agents +1

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Protect Servers versions 7.1 through 8.1 IBM Spectrum Protect Storage Agents versions 7.1 through 8.1 Description: A local attacker could gain elevated privileges on the system by loading a specially crafted library loaded by the...

USN-4044-1 znc vulnerability

Fix vulnerability where an authenticated non-admin users could load a module with a crafted name, then escalate privileges and run arbitrary code...

IBM InfoSphere Information Server Cross-Frame Scripting Vulnerability

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server. An attacker could exploit the...

CVE-2019-8459

Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previously placed executable with a name similar to the parts of the path, instead of the intended one...