5807 matches found
Design/Logic Flaw
REDCap before 9.3.4 has XSS on the Customize & Manage Locking/E-signatures page via Lock Record Custom Text values...
CVE-2019-17121
REDCap before 9.3.4 has XSS on the Customize & Manage Locking/E-signatures page via Lock Record Custom Text values...
PT-2019-14959
Name of the Vulnerable Software and Affected Versions REDCap versions prior to 9.3.4 Description The issue concerns a problem with the Customize & Manage Locking/E-signatures page, where it is possible to perform XSS attacks via Lock Record Custom Text values. Recommendations For versions prior t...
CVE-2019-9268
In libstagefright, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:...
Design/Logic Flaw
In libstagefright, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:...
CVE-2019-9268
CVE-2019-9268 affects Android’s media stack (libstagefright) with a use-after-free caused by improper locking, enabling local escalation of privilege in the media server without extra privileges. The issue is tied to Android 10 (Android-10) and is documented in the Android 10 Security Release Not...
PT-2019-19488
Name of the Vulnerable Software and Affected Versions Android versions prior to Android-10 Description The issue is related to a possible use-after-free in libstagefright due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution...
CVE-2019-9268: Use After Free
In libstagefright, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:...
CVE-2019-9273
In the Android kernel in the synapticsdsxhtc touchscreen driver there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2019-9275: Use After Free
In the Android kernel in the mnh driver there is a use after free due to improper locking. This could lead to escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2019-9273: Use After Free
In the Android kernel in the synapticsdsxhtc touchscreen driver there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
PT-2019-19495
Name of the Vulnerable Software and Affected Versions Android kernel affected versions not specified Description The issue is related to a use after free in the mnh driver due to improper locking. This could lead to escalation of privilege, requiring System execution privileges for exploitation...
CVE-2019-9447: Use After Free
In the Android kernel in the FingerTipS touchscreen driver there is a possible use-after-free due to improper locking. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
Design/Logic Flaw
In SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
Security update for qemu (important)
openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2019:2059-1 Rating: important References: 1079730 1098403 1111025 1119115 1134883 1135902 1136540 1136778 1140402 1143794 Cross-References: CVE-2019-12155 CVE-2019-13164 CVE-2019-14378 Affected Products: openSUSE Leap...
SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2019:2246-1)
This update for qemu fixes the following issues : Security issues fixed : CVE-2019-14378: Security fix for heap overflow in ipreass on big packet input bsc1143794. CVE-2019-12155: Security fix for NULL pointer dereference while releasing spice resources bsc1135902. CVE-2019-13164: Security fix fo...
PT-2019-14235
Name of the Vulnerable Software and Affected Versions OpenWrt libuci versions prior to 15.05.1 Description An issue was discovered in OpenWrt libuci, where /tmp/.uci/network locking is mishandled after reception of a long SetWanSettings command, leading to a device hang. Recommendations For...
CVE-2019-15513: Improper Locking
An issue was discovered in OpenWrt libuci aka Library for the Unified Configuration Interface before 15.05.1 as used on Motorola CX2L MWR04L 1.01 and C1 MWR03 1.01 devices. /tmp/.uci/network locking is mishandled after reception of a long SetWanSettings command, leading to a device hang...
