10657 matches found
CVE-2010-4661
udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules...
CVE-2019-3648 Implicit loading of DLLs
A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission...
CVE-2019-5695
NVIDIA GeForce Experience prior to 3.20.1 and Windows GPU Display Driver all versions contains a vulnerability in the local service provider component in which an attacker with local system and privileged access can incorrectly load Windows system DLLs without validating the path or signature als...
CVE-2019-18658
In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service DoS via a special file such as /dev/urandom, via...
Design/Logic Flaw
In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service DoS via a special file such as /dev/urandom, via...
Adobe Animate CVE-2019-7960 DLL Loading Local Privilege Escalation Vulnerability
Description Adobe Animate is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Animate 19.2.1 and prior are vulnerable. Technologies Affected Adobe Animate 14.2.0.20 Adobe Animate 15.0.0.173 Adobe Animate 15.0.1.179 Adobe...
APSB19-34 Security update available for Adobe Animate CC
Adobe has released updates for Adobe Animate CC for Windows and macOS. This update resolves an insecure library loading vulnerability that could lead to privilege escalation...
Electronic Arts Origin Client URI Handler Remote Code Execution (CVE-2019-12828)
A remote code execution vulnerability exists in the Electronic Arts Origin Client. The vulnerability is due to improper sanitization of user-supplied data which may be passed to the application as an option regarding the DLL loading path. A remote attacker could exploit the vulnerability by...
Apple iTunes Security Updates (HT210726)
Apple iTunes is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...
Apple macOS Catalina and Apple iTunes for Windows Dynamic Library Loading Vulnerability
Apple iTunes for Windows and Apple macOS Catalina are both products of Apple Inc. Apple iTunes for Windows is a Windows-based media player application. apple macOS Catalina is a specialized operating system developed for Mac computers. Apple macOS Catalina is a specialized operating system...
About the security content of iTunes 12.10.2 for Windows
About the security content of iTunes 12.10.2 for Windows This document describes the security content of iTunes 12.10.2 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
Apple Mac OS X Security Updates (HT210722)-01
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-3375
qtparted has insecure library loading which may allow arbitrary code execution...
Code injection
qtparted has insecure library loading which may allow arbitrary code execution...
CVE-2010-3375
qtparted has insecure library loading which may allow arbitrary code execution...
CVE-2010-3375
qtparted has insecure library loading which may allow arbitrary code execution...
CVE-2010-3375
CVE-2010-3375 affects qtparted and is caused by insecure library loading, enabling arbitrary code execution. Multiple connected sources (Red Hat, Ubuntu, SUSE, NVD) describe a library-loading vulnerability in qtparted with high impact: in the NVD, CVSS v3.1 base score 9.8 (CRITICAL), vector NETWO...
CVE-2017-16541
Firefox proxy settings can be bypassed by using the automount feature with autofs to create a mount point on the local file system. Content can be loaded from this mounted file system directly using a file: URI, bypassing configured proxy settings. This issue only affects OS X in default...
TeamViewer DLL Side Loading Vulnerability (Oct 2019) - Windows
TeamViewer is prone to a DLL side loading vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:teamviewer:teamviewer";...
CVE-2019-18196
A DLL side loading vulnerability in the Windows Service in TeamViewer versions up to 11.0.133222 fixed in 11.0.214397, 12.0.181268 fixed in 12.0.214399, 13.2.36215 fixed in 13.2.36216, and 14.6.4835 fixed in 14.7.1965 on Windows could allow an attacker to perform code execution on a target system...