KLA11714 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, cause denial of service. Below is a complete list of vulnerabilities: 1. Cross-origin data leak vulnerability can be exploited to arbitrary code executio...

CVE-2018-18931

An issue was discovered in the Tightrope Media Carousel digital signage product 7.0.4.104. Due to insecure default permissions on the C:\TRMS\Services directory, an attacker who has gained access to the system can elevate their privileges from a restricted account to full SYSTEM by replacing the...

Design/Logic Flaw

An issue was discovered in the Tightrope Media Carousel digital signage product 7.0.4.104. Due to insecure default permissions on the C:\TRMS\Services directory, an attacker who has gained access to the system can elevate their privileges from a restricted account to full SYSTEM by replacing the...

CVE-2018-18931: Improper Privilege Management

An issue was discovered in the Tightrope Media Carousel digital signage product 7.0.4.104. Due to insecure default permissions on the C:\TRMS\Services directory, an attacker who has gained access to the system can elevate their privileges from a restricted account to full SYSTEM by replacing the...

TerraMaster FS-210 Elevation of Privilege Vulnerability

TerraMaster FS-210 is a NAS Network Attached Storage device from TerraMaster, a Shenzhen, China based company. An elevation of privilege vulnerability exists in TerraMaster FS-210 version 4.0.19, which can be exploited to elevate privileges with the help of the 1.user.php file...

CVE-2019-18195

An issue was discovered on TerraMaster FS-210 4.0.19 devices. Normal users can use 1.user.php for privilege elevation...

CVE-2019-18195

TerraMaster FS-210 (firmware 4.0.19) contains an elevation-of-privilege flaw where normal users can leverage 1.user.php to gain higher privileges. Documented impact is network-accessible via the vulnerability with high severity (CVSS 3.1 base score 8.8, HIGH). Root cause details are not elaborate...

CVE-2019-18195

An issue was discovered on TerraMaster FS-210 4.0.19 devices. Normal users can use 1.user.php for privilege elevation...

CVE-2019-18195: Undefined Security Weakness

An issue was discovered on TerraMaster FS-210 4.0.19 devices. Normal users can use 1.user.php for privilege elevation...

PT-2019-15266

Name of the Vulnerable Software and Affected Versions TerraMaster FS-210 version 4.0.19 Description An issue was discovered that allows normal users to elevate their privileges. This is achieved by utilizing the "1.user.php" endpoint for privilege elevation. Recommendations For TerraMaster FS-210...

Avast antivirus and AVG antivirus DLL hijacking vulnerability

Avast Antivirus is a suite of antivirus software from the Czech company Avast.AVG AntiVirus is an antivirus and anti-backdoor antivirus program.Avira Antivirus engine is an antivirus engine from the German company Avira.Avast Antivirus is a suite of antivirus software from the Czech company...

Google Chrome Security Updates (stable-channel-update-for-desktop_22-2019-10) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome Security Updates (stable-channel-update-for-desktop_22-2019-10) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Content Collector for SAP Applications

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Java™ Version 7 and Java™ Version 8 that is used by IBM Content Collector for SAP Applications. These issues were disclosed as part of the IBM Java SDK updates in Jul 2019. Vulnerability Details CVEID: CVE-2019-11772...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM® Db2®.

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7.0.10.45 and earlier, 7.1.4.45 and earlier, 8.0.5.37 and earlier used by IBM® Db2®. These issues were disclosed as part of the IBM Java SDK updates in July 2019. Vulnerability Details If you run your own Java co...

KLA11588 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in media can be exploited to arbitrary code execution; 2. Buffer overrun vulnerability in...

PT-2019-4291

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description The issue is related to insufficient access control in Visual Studio Code, allowing an attacker to elevate their privileges. This is due to the exposure of a debug listener to loca...

CloudCTI HIP Integrator Recognition Configuration Tool Elevation of Privilege Vulnerability

CloudCTI HIP Integrator Recognition Configuration Tool is an integrator recognition configuration tool from CloudCTI, Netherlands. A security vulnerability exists in the CloudCTI HIP Integrator Recognition Configuration Tool that originates from an elevated privilege process that can execute...

PT-2019-4401

Name of the Vulnerable Software and Affected Versions ZyXEL P-1302-T10D v3 devices with firmware version 2.00ABBX.3 and earlier Description The issue is related to inadequate access control in the firmware of the ZyXEL P-1302-T10D v3 router. This could allow an unauthorized user to access certain...

PT-2019-5739

Name of the Vulnerable Software and Affected Versions Zyxel P1302-T10 v3 version 2.00ABBX.3 and earlier Description The issue is related to an insecure direct object reference vulnerability that allows attackers to gain privileges and access certain admin pages. This vulnerability is associated...