UBUNTU-CVE-2020-12050

SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an arbitrary library...

The vulnerability of the Google Chrome browser’s loading mechanism, related to the lack of data validation mechanisms, allows attackers to compromise the integrity of data.

The vulnerability of the Google Chrome browser’s download mechanism is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability allows an attacker to compromise the integrity of data through the created HTML page...

IBM Tivoli Monitoring Unauthorized Access Vulnerability

IBM Tivoli Monitoring is a set of system monitoring software from IBM in the United States. A security vulnerability exists in IBM Tivoli Monitoring versions 6.3.0 through 630 FP7 including Service Pack. The vulnerability can be exploited by an attacker to load other DLL files located in the same...

CVE-2020-11705

An issue was discovered in ProVide formerly zFTPServer through 13.1. /ajax/ImportCertificate allows an attacker to load an arbitrary certificate in .pfx format or overwrite arbitrary files via the fileName parameter...

CVE-2020-1802

There is an insufficient integrity validation vulnerability in several products. The device does not sufficiently validate the integrity of certain file in certain loading processes, successful exploit could allow the attacker to load a crafted file to the device through USB.Affected product...

Input validation

There is an insufficient integrity validation vulnerability in several products. The device does not sufficiently validate the integrity of certain file in certain loading processes, successful exploit could allow the attacker to load a crafted file to the device through USB.Affected product...

CVE-2020-1802

CVE-2020-1802 pertains to Huawei OSCA-550 family devices with an insufficient integrity validation vulnerability during loading via USB. Affected versions include OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X v1.0.1.23(SP2). The root cause is inadequate integrity checks on certain files during t...

Privilege Escalation

systemtap is vulnerable to privilege escalation. The vulnerability exists as a race condition flaw was found in the way the staprun utility performed module loading. A local user who is a member of the stapusr group could use this flaw to modify a signed module while it is being loaded, allowing...

Authorization Bypass

firefox is vulnerable to authorization bypass. The vulnerability exists as a flaw was found in the Firefox XML document loading security checks. Certain security checks were not being called when an XML document was loaded. This could possibly be leveraged later by an attacker to load certain...

Information Disclosure

The kernel-rt is vulnerable to Information Disclosure. Kees Cook and Steve Beattie discovered a race condition in the /proc code in the Linux kernel. This could lead to information in the "/proc/pid/maps" and "/proc/pid/smaps" files being leaked to users who would otherwise not have access to thi...

Slow performance in applications that use the DirectWrite API on a computer that is running Windows 7 or Windows Server 2008 R2

Slow performance in applications that use the DirectWrite API on a computer that is running Windows 7 or Windows Server 2008 R2 Symptoms On a computer that is running Windows 7 or Windows Server 2008 R2, you may experience slow performance in applications that use the DirectWrite API for example,...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. The Call+ application can load classes from an unintended path, leading to Code Execution. The Samsung ID is SVE-2017-10886 April 2018...

CVE-2018-21075

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. The Call+ application can load classes from an unintended path, leading to Code Execution. The Samsung ID is SVE-2017-10886 April 2018...

CVE-2017-18552

An issue was discovered in net/rds/afrds.c in the Linux kernel before 4.11. There is an out of bounds write and read in the function rdsrecvtracklatency. Mitigation As the RDS module will be auto-loaded when required, its use can be disabled by preventing the module from loading with the followin...

CVE-2019-18198

A flaw was found in the Linux kernel’s IPv6 routing system. A local attacker with the ability to configure routing can create a situation where they can corrupt memory or possibly escalate privileges. Mitigation As the IPV6 module will be auto-loaded when required, its use can be disabled by...

CVE-2020-8096

Untrusted Search Path vulnerability in Bitdefender High-Level Antimalware SDK for Windows allows an attacker to load third party code from a DLL library in the search path. This issue affects: Bitdefender High-Level Antimalware SDK for Windows versions prior to 3.0.1.204...

Schneider Electric Limited CET850 suffers from a dll hijacking vulnerability

Schneider Electric SA is a global electrical company headquartered in France. A dll hijacking vulnerability exists in Schneider Electric SA CET850, which can be exploited by an attacker to load a malicious dll and execute malicious code...

CVE-2019-19529

A use-after-free flaw was found in the driver for the USB Microchip CAN BUS Analyzer Tool. The CAN BUS analysis hardware is not commonly found on server-grade hardware where the flaw exists while a device is removed physical access or a kernel module is unloaded administrative privileges. An...

The vulnerability of the file loading mechanism on the server of the distributed application development platform SiTex allows a perpetrator to upload a malicious file to the server.

The vulnerability of the file loading mechanism on the server of the distributed application development platform SiTex is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to upload a malicious file to the server remotely...

CVE-2019-15218

A flaw was found in the Linux kernel's Siano Mobile Silicon MDTV receiver driver. An attacker, with physical access and a specially crafted USB device, can exploit this vulnerability, creating a NULL pointer dereference and causing the system to crash. The highest threat from this vulnerability i...