Description of the security update for SharePoint Server 2019: September 10, 2019

None None...

Debian DSA-4521-1 : docker.io - security update

Three security vulnerabilities have been discovered in the Docker container runtime: Insecure loading of NSS libraries in 'docker cp'could result in execution of code with root privileges, sensitive data could be logged in debug mode and there was a command injection vulnerability in the 'docker...

APSB19-45 Security update available for Adobe Application Manager

Adobe has released a security update for the Adobe Application Manager installer for Windows. This update resolves an insecure library loading vulnerability in the installer that could lead to Arbitrary Code Execution...

CVE-2019-15919

An flaw was discovered in the Linux kernel's CIFS client implementation. While issuing an SMB2write, a value can be used after it was intended to be freed when CIFS function tracing is enabled. Even though the data is used after being freed, using it to for privilege escalation does not seem...

SharPersist: Windows Persistence Toolkit in C#

Background PowerShell has been used by the offensive community for several years now but recent advances in the defensive security industry are causing offensive toolkits to migrate from PowerShell to reflective C to evade modern security products. Some of these advancements include Script Block...

CVE-2019-8461

Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially crafted DLL placed in any PATH location accessible with...

CVE-2019-8461

CVE-2019-8461 – Check Point Endpoint Security Initial Client for Windows is a local privilege escalation vulnerability affecting versions prior to E81.30. The issue arises when the client loads a DLL placed in any PATH location on a clean image without the Endpoint Client installed, allowing an a...

CVE-2019-8461

Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially crafted DLL placed in any PATH location accessible with...

PT-2020-9627 · Sdl +3 · Sdl +3

Name of the Vulnerable Software and Affected Versions: SDL versions prior to 1.2.15 SDL versions 2.x prior to 2.0.9 Description: A heap-based buffer overflow flaw exists while copying an existing surface into a new optimized one, due to a lack of validation while loading a BMP image. This issue...

PT-2019-17088 · Ibm · Ibm Db2 High Performance Unload

Name of the Vulnerable Software and Affected Versions: IBM DB2 High Performance Unload load for LUW versions 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 Description: The issue allows a low-privileged user to execute arbitrary code with root authority by loading arbitrary db2...

CVE-2017-18576

The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...

CVE-2017-18576

The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...

Design/Logic Flaw

The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...

CVE-2017-18576

The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...

Security Bulletin: Multiple privilege escalation vulnerabilities in IBM DB2 HPU

Summary IBM DB2 High Performance Unload load privilege escalation in IBM DB2 HPU debug binary via trusted PATH and privilege escalation in IBM DB2 HPU via loading DB2 library Vulnerability Details Relevant CVE Information: CVEID: CVE-2019-4447 DESCRIPTION: IBM DB2 High Performance Unload load...

CVE-2019-15295

An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitdefender Antivirus Free 2020 versions prior to 1.0.15.138, allows an attacker to load an arbitrary DLL file from the search path...

Microsoft Outlook Elevation of Privilege Vulnerability (CNVD-2019-40535)

Microsoft Outlook is a personal information management system software with features such as sending and receiving e-mail, calendars and more. An elevation of privilege vulnerability exists in Microsoft Outlook, which arises from a failure to adequately validate the format of incoming emails as...

CVE-2019-5037

An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version 4620002. A specially crafted weave packet can cause an integer overflow and an out-of-bounds read on unmapped memory to occur, resulting in a denial of servic...

Integer overflow

An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version 4620002. A specially crafted weave packet can cause an integer overflow and an out-of-bounds read on unmapped memory to occur, resulting in a denial of servic...

CVE-2019-5037

CVE-2019-5037 affects Nest Cam IQ Indoor (4620002) WeaveCASEEngine::DecodeCertificateInfo. The issue is an integer overflow in the Weave certificate processing that allows an attacker to set CertInfoLength to 0xFFFF, causing the TLVReader to advance beyond the packet into unmapped memory and cras...