12353 matches found
CVE-2019-15417: Undefined Security Weakness
The Tecno Spark Pro Android device with a build fingerprint of TECNO/H3722/TECNO-K8:7.0/NRD90M/K8-H3722ABCDE-N-171229V96:user/release-keys contains a pre-installed app with a package name of com.lovelyfont.defcontainer app versionCode=7, versionName=7.0.5 that allows unauthorized dynamic code...
PT-2019-14075
Name of the Vulnerable Software and Affected Versions Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys Description The issue concerns a pre-installed platform app with a package name of com.lovelyfont.defcontainer tha...
PT-2019-14146
Name of the Vulnerable Software and Affected Versions Tecno Spark Pro Android device with a build fingerprint of TECNO/H3722/TECNO-K8:7.0/NRD90M/K8-H3722ABCDE-N-171229V96:user/release-keys com.lovelyfont.defcontainer app version 7.0.5 Description The issue concerns a pre-installed app that allows...
CVE-2010-4661
udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules...
CVE-2019-3648 Implicit loading of DLLs
A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission...
CVE-2019-5695
NVIDIA GeForce Experience prior to 3.20.1 and Windows GPU Display Driver all versions contains a vulnerability in the local service provider component in which an attacker with local system and privileged access can incorrectly load Windows system DLLs without validating the path or signature als...
CVE-2019-18658
In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service DoS via a special file such as /dev/urandom, via...
Design/Logic Flaw
In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service DoS via a special file such as /dev/urandom, via...
APSB19-34 Security update available for Adobe Animate CC
Adobe has released updates for Adobe Animate CC for Windows and macOS. This update resolves an insecure library loading vulnerability that could lead to privilege escalation...
Adobe Animate CVE-2019-7960 DLL Loading Local Privilege Escalation Vulnerability
Description Adobe Animate is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Animate 19.2.1 and prior are vulnerable. Technologies Affected Adobe Animate 14.2.0.20 Adobe Animate 15.0.0.173 Adobe Animate 15.0.1.179 Adobe...
Apple macOS Catalina and Apple iTunes for Windows Dynamic Library Loading Vulnerability
Apple iTunes for Windows and Apple macOS Catalina are both products of Apple Inc. Apple iTunes for Windows is a Windows-based media player application. apple macOS Catalina is a specialized operating system developed for Mac computers. Apple macOS Catalina is a specialized operating system...
Apple iTunes Security Updates (HT210726)
Apple iTunes is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...
Electronic Arts Origin Client URI Handler Remote Code Execution (CVE-2019-12828)
A remote code execution vulnerability exists in the Electronic Arts Origin Client. The vulnerability is due to improper sanitization of user-supplied data which may be passed to the application as an option regarding the DLL loading path. A remote attacker could exploit the vulnerability by...
About the security content of iTunes 12.10.2 for Windows
About the security content of iTunes 12.10.2 for Windows This document describes the security content of iTunes 12.10.2 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
Apple Mac OS X Security Updates (HT210722)-01
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-3375
qtparted has insecure library loading which may allow arbitrary code execution...
Code injection
qtparted has insecure library loading which may allow arbitrary code execution...
CVE-2010-3375
qtparted has insecure library loading which may allow arbitrary code execution...
CVE-2010-3375
CVE-2010-3375 affects qtparted and is caused by insecure library loading, enabling arbitrary code execution. Multiple connected sources (Red Hat, Ubuntu, SUSE, NVD) describe a library-loading vulnerability in qtparted with high impact: in the NVD, CVSS v3.1 base score 9.8 (CRITICAL), vector NETWO...