12353 matches found
Adobe Application Manager unsafe library loading (dll hijacking) vulnerability
Adobe Application Manager AAM is an application for managing Adobe products from the American company Audobee Adobe. The program is mainly used to manage the installation of Adobe products, updates and so on. Adobe Application Manager suffers from an insecure library loading DLL hijacking...
Description of the security update for SharePoint Server 2019: September 10, 2019
None None...
Debian DSA-4521-1 : docker.io - security update
Three security vulnerabilities have been discovered in the Docker container runtime: Insecure loading of NSS libraries in 'docker cp'could result in execution of code with root privileges, sensitive data could be logged in debug mode and there was a command injection vulnerability in the 'docker...
APSB19-45 Security update available for Adobe Application Manager
Adobe has released a security update for the Adobe Application Manager installer for Windows. This update resolves an insecure library loading vulnerability in the installer that could lead to Arbitrary Code Execution...
CVE-2019-15919
An flaw was discovered in the Linux kernel's CIFS client implementation. While issuing an SMB2write, a value can be used after it was intended to be freed when CIFS function tracing is enabled. Even though the data is used after being freed, using it to for privilege escalation does not seem...
SharPersist: Windows Persistence Toolkit in C#
Background PowerShell has been used by the offensive community for several years now but recent advances in the defensive security industry are causing offensive toolkits to migrate from PowerShell to reflective C to evade modern security products. Some of these advancements include Script Block...
CVE-2019-8461
Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially crafted DLL placed in any PATH location accessible with...
CVE-2019-8461
Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially crafted DLL placed in any PATH location accessible with...
CVE-2019-8461
CVE-2019-8461 – Check Point Endpoint Security Initial Client for Windows is a local privilege escalation vulnerability affecting versions prior to E81.30. The issue arises when the client loads a DLL placed in any PATH location on a clean image without the Endpoint Client installed, allowing an a...
CVE-2019-8461: Process Control
Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially crafted DLL placed in any PATH location accessible with...
PT-2020-9627 · Sdl +3 · Sdl +3
Name of the Vulnerable Software and Affected Versions: SDL versions prior to 1.2.15 SDL versions 2.x prior to 2.0.9 Description: A heap-based buffer overflow flaw exists while copying an existing surface into a new optimized one, due to a lack of validation while loading a BMP image. This issue...
PT-2019-17088 · Ibm · Ibm Db2 High Performance Unload
Name of the Vulnerable Software and Affected Versions: IBM DB2 High Performance Unload load for LUW versions 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 Description: The issue allows a low-privileged user to execute arbitrary code with root authority by loading arbitrary db2...
PT-2019-4180
Name of the Vulnerable Software and Affected Versions Swift versions prior to 5.1.1 Endpoint Security Initial Client for Windows affected versions not specified Description The issue concerns incorrect management of file descriptors in URLSession, potentially leading to inadvertent data disclosur...
CVE-2017-18576
The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...
CVE-2017-18576
The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...
Design/Logic Flaw
The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...
CVE-2017-18576
The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...
CVE-2017-18576
The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...
CVE-2017-18576: Improper Neutralization of Input During Web Page Generation
The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...
PT-2019-8510
Name of the Vulnerable Software and Affected Versions WordPress event-notifier plugin versions prior to 1.2.1 Description The issue concerns a cross-site scripting XSS flaw in the loading animation of the event-notifier plugin. Recommendations For versions prior to 1.2.1, update the event-notifie...