CVE-2019-19166: Download of Code Without Integrity Check

Tobesoft XPlatform v9.1, 9.2.0, 9.2.1 and 9.2.2 have a vulnerability that can load unauthorized DLL files. It allows attacker to cause remote code execution...

CVE-2020-12050

SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an arbitrary library...

UBUNTU-CVE-2020-12050

SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an arbitrary library...

CVE-2020-12050: Concurrent Execution using Shared Resource with Improper Synchronization

SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an arbitrary library...

Google Chrome Data Validation

The vulnerability of the Google Chrome browser’s download mechanism is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability allows an attacker to compromise the integrity of data through the created HTML page...

IBM Tivoli Monitoring Unauthorized Access Vulnerability

IBM Tivoli Monitoring is a set of system monitoring software from IBM in the United States. A security vulnerability exists in IBM Tivoli Monitoring versions 6.3.0 through 630 FP7 including Service Pack. The vulnerability can be exploited by an attacker to load other DLL files located in the same...

CVE-2020-4311: Incorrect Permission Assignment for Critical Resource

IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. By placing a specially crafted file, an attacker could exploit this vulnerability to load other DLL files located in the same directory and execute arbitrary code on the system. IBM X-Force ID: 17708...

PT-2020-17993

Name of the Vulnerable Software and Affected Versions IBM Tivoli Monitoring version 6.3.0 Description The issue allows a local attacker to execute arbitrary code on the system by placing a specially crafted file. This enables the attacker to load other DLL files located in the same directory and...

CVE-2020-7490: Untrusted Search Path

A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic V1.1 HotFix 15 and prior and Vijeo Designer V6.9 SP9 and prior, which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product...

PT-2020-19476

Name of the Vulnerable Software and Affected Versions Aviatrix OpenVPN client versions through 2.5.7 Description The issue arises when OpenSSL parameters are altered from their issued value set, potentially allowing unauthorized third-party libraries to load. This could lead to unauthorized acces...

CVE-2020-7224: Undefined Security Weakness

The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party libraries to load...

PT-2020-2064

Name of the Vulnerable Software and Affected Versions Vijeo Designer Basic versions V1.1 HotFix 15 and prior Vijeo Designer versions V6.9 SP9 and prior Description A vulnerability exists in the software related to untrusted search paths, which could allow an attacker to execute arbitrary code on...

PT-2020-20091

Name of the Vulnerable Software and Affected Versions Lenovo System Interface Foundation versions prior to 1.2.184.31 Description A vulnerability was reported that could allow unsigned DLL files to be executed. Recommendations For versions prior to 1.2.184.31, update to version 1.2.184.31 or late...

CVE-2020-11705

An issue was discovered in ProVide formerly zFTPServer through 13.1. /ajax/ImportCertificate allows an attacker to load an arbitrary certificate in .pfx format or overwrite arbitrary files via the fileName parameter...

CVE-2020-1802

There is an insufficient integrity validation vulnerability in several products. The device does not sufficiently validate the integrity of certain file in certain loading processes, successful exploit could allow the attacker to load a crafted file to the device through USB.Affected product...

Input validation

There is an insufficient integrity validation vulnerability in several products. The device does not sufficiently validate the integrity of certain file in certain loading processes, successful exploit could allow the attacker to load a crafted file to the device through USB.Affected product...

CVE-2020-1802

CVE-2020-1802 pertains to Huawei OSCA-550 family devices with an insufficient integrity validation vulnerability during loading via USB. Affected versions include OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X v1.0.1.23(SP2). The root cause is inadequate integrity checks on certain files during t...

Privilege Escalation

systemtap is vulnerable to privilege escalation. The vulnerability exists as a race condition flaw was found in the way the staprun utility performed module loading. A local user who is a member of the stapusr group could use this flaw to modify a signed module while it is being loaded, allowing...

Authorization Bypass

firefox is vulnerable to authorization bypass. The vulnerability exists as a flaw was found in the Firefox XML document loading security checks. Certain security checks were not being called when an XML document was loaded. This could possibly be leveraged later by an attacker to load certain...

Information Disclosure

The kernel-rt is vulnerable to Information Disclosure. Kees Cook and Steve Beattie discovered a race condition in the /proc code in the Linux kernel. This could lead to information in the "/proc/pid/maps" and "/proc/pid/smaps" files being leaked to users who would otherwise not have access to thi...