2148 matches found
Multiple Cisco Products CVE-2019-15958 Remote Code Execution Vulnerability
Description Multiple Cisco Products are prone to an remote code-execution vulnerability. Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the application. This issue is being tracked by Cisco Bug IDs CSCvp79419, CSCvp79611 . Technologies...
Multiple Trend Micro Products Multiple Security Vulnerabilities
Description Multiple Trend Micro Products are prone to the following security vulnerabilities: 1. An information-disclosure vulnerability 2. An arbitrary file-deletion vulnerability An attacker can exploit this issue to obtain sensitive information or delete arbitrary files from the affected...
Google Android Framework Multiple Security Vulnerabilities
Description Google Android is prone to the following security vulnerabilities: 1. Multiple privilege-escalation vulnerabilities 2. Multiple information-disclosure vulnerabilities An attacker can exploit these issues to gain elevated privileges or gain access to sensitive information; this may...
Google Android Framework Component Multiple Information Disclosure Vulnerabilities
Description Google Android is prone to multiple information-disclosure vulnerabilities. An attacker can exploit these issues to gain access to sensitive information; this may lead to further attacks. This issue is being tracked by Android Bug IDs A-135269143, A-135270103. Technologies Affected...
DEBIAN-CVE-2019-18424
An issue was discovered in Xen through 4.12.x allowing attackers to gain host OS privileges via DMA in a situation where an untrusted domain has access to a physical device. This occurs because passed through PCI devices may corrupt host memory after deassignment. When a PCI device is assigned to...
libarchive CVE-2019-18408 Arbitrary Code Execution Vulnerability
Description libarchive is prone to an arbitrary code-execution vulnerability. Attackers may leverage this issue to execute arbitrary code on the affected system. Failed attacks will cause denial-of-service conditions. Technologies Affected Ubuntu Ubuntu Linux 14.04 ESM Ubuntu Ubuntu Linux 16.04 L...
Apple iOS and macOS Multiple Security Vulnerabilities
Description Apple iOS and macOS are prone to multiple security vulnerabilities. Attackers can exploit these issues to gain sensitive information or execute arbitrary code. This may aid in further attacks. Technologies Affected Apple iOS 10 Apple iOS 10.0.1 Apple iOS 10.1 Apple iOS 10.2 Apple iOS...
Apple macOS Multiple Security Vulnerabilities
Description Apple macOS is prone to multiple security vulnerabilities. Attackers can exploit these issues to execute arbitrary code, gain elevated privileges, obtain sensitive information or cause denial-of-service conditions. Technologies Affected Apple macOS 10.12 Apple macOS 10.12.1 Apple macO...
CODESYS ENI Server CVE-2019-16265 Stack Buffer Overflow Vulnerability
Description CODESYS ENI Server is prone to a stack-based buffer-overflow vulnerability. Exploiting this issue may allow remote attackers to execute arbitrary code within the context of the affected application. Failed attacks will cause denial-of-service conditions. CODESYS ENI Server versions...
Schneider Electric ProClima ICSA-19-295-01 Multiple Remote Code Execution Vulnerabilities
Description Schneider Electric ProClima is prone to multiple remote code-execution vulnerabilities. Attackers can exploit these issues to execute arbitrary code on the system. Schneider Electric ProClima versions prior to 8.0.0 are vulnerable. Technologies Affected Schneider-Electric Proclima 6.0...
Foxit Studio Photo CVE-2019-17138 Out-Of-Bounds Read Information Disclosure Vulnerability
Description Foxit Studio Photo is prone to a information disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information. Foxit Studio Photo 3.6.6.915 and prior are vulnerable. Technologies Affected Foxit Studio Photo 3.6.6.915 Recommendations Block external access at...
libxslt CVE-2019-18197 Arbitrary Code Execution Vulnerability
Description libxslt is prone to an arbitrary code-execution vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions. libxslt version 1.1.33 is...
Horner Automation Cscape ICSA-19-290-02 Multiple Arbitrary Code Execution Vulnerabilities
Description Horner Automation Cscape is prone to multiple arbitrary code-execution vulnerabilities. Attackers can exploit these issues to execute arbitrary code within the context of the affected application, crash the device or obtain sensitive information. Versions prior to Horner Automation...
SQLite CVE-2019-8457 Out of Bounds Read Heap Buffer Overflow Vulnerability
Description SQLite is prone to a remote heap-based buffer-overflow vulnerability. Attackers can exploit this issue to crash the application, resulting in a denial-of-service condition. Due to the nature of this issue, arbitrary code execution may be possible but this has not been confirmed...
Microsoft Office for Mac VU#125336 Remote Code Execution Vulnerability
Description Microsoft Office for Mac is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...
McAfee Endpoint Security CVE-2019-3652 Local Code Injection Vulnerability
Description McAfee Endpoint Security is prone to a vulnerability that lets attackers inject and execute arbitrary code. Successfully exploiting this issue may allow attackers to inject and execute arbitrary code. This may lead to other attacks. McAfee Endpoint Security ENS versions prior to 10.6....
ASX to MP3 converter 3.1.3.7 - (.asx) Local Stack Overflow (DEP Bypass) Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule "ASX to MP3 converter 3.1.3.7 - '.asx' Local Stack Overflow DEP", 'Description' = %q This module exploits a stack buffer overfl...
OpenSSH CVE-2019-16905 Integer Overflow Vulnerability
Description OpenSSH is prone to an integer overflow vulnerability. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition. OpenSSH versions 7.7 through 7.9 and 8.x prior to...
Microsoft Edge Chakra Scripting Engine CVE-2019-1366 Remote Memory Corruption Vulnerability
Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...
Microsoft Excel CVE-2019-1327 Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...