Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Financial Transaction Manager for Digital Payments

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by Financial Transaction Manager for Digital Payments. Financial Transaction Manager for Digital Payments FTM DP has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using...

CVE-2020-8950

The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of privilege by placing a crafted file in %PROGRAMDATA%\AMD\PPC\upload and then creating a symbolic link in %PROGRAMDATA%\AMD\PPC\temp that points to an arbitrary folder with an...

Microsoft Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability

Microsoft Malicious Software Removal Tool is a suite of tools MSRT for detecting and removing specific popular malware from Microsoft USA. An elevation of privilege vulnerability exists in the Microsoft Windows Malicious Software Removal Tool. The vulnerability can be exploited by an attacker to...

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-13564)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows and Microsoft Windows...

Intel Renesas Electronics USB Privilege Lift Vulnerability

Intel Renesas Electronics USB is a driver for the USB 3 Renesas Electronics adapter, which is located in many common Intel motherboards. An elevation of privilege vulnerability exists in Intel Renesas Electronics USB. An attacker can exploit the vulnerability to potentially enable elevation of...

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-13558)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows and Microsoft Windows...

Microsoft Windows Graphics Component Elevation of Privilege Vulnerability (CNVD-2020-14699)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevation of privilege vulnerability exists in the Microsoft Windows Graphics component that stems from the component not properly handling objects in memory. An attacker could...

CVE-2020-0752

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0666, CVE-2020-0667, CVE-2020-0735...

CVE-2020-0735

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0666, CVE-2020-0667, CVE-2020-0752...

CVE-2020-0679

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0680, CVE-2020-0682...

Service Tracing Privilege Elevation Vulnerability

This module leverages a trusted file overwrite with a DLL hijacking vulnerability to gain SYSTEM-level access on vulnerable Windows 10 x64 targets. Module Options msf use exploit/windows/local/cve/20200668servicetracing msf undefined20200668servicetracing show actions ...actions... msf...

Google Android Kernel Component Elevation of Privilege Vulnerability (CNVD-2020-04527)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Kernel component Binder driver in Google Android. No details of the vulnerability are available at this time...

Google Android System elevation of privilege vulnerability (CNVD-2020-07209)

Android is a Linux-based free and open source operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the System component of Google Android 8.0, 8.1, 9, and 10. No details of the vulnerability are available at this time...

Google Android Framework elevation of privilege vulnerability (CNVD-2020-07204)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Framework component of Google Android 10. No details of the vulnerability are available at this time...

MariaDB mysql_install_db Script Elevation of Privilege Vulnerability

The MariaDB database management system is a fork of MySQL, mainly maintained by the open source community under the GPL license. MariaDB is intended to be fully compatible with MySQL, including the API and command line, making it an easy replacement for MySQL. An elevation of privilege...

SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2020:0331-1)

This update for systemd fixes the following issues : CVE-2020-1712 bscbsc1162108 Fix a heap use-after-free vulnerability, when asynchronous Polkit queries were performed while handling Dbus messages. A local unprivileged attacker could have abused this flaw to crash systemd services or potentiall...

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affect IBM Sterling Secure Proxy

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.8 used by IBM Sterling Secure Proxy. These issues were disclosed as part of the IBM Java SDK updates in January 2019. Vulnerability Details CVEID: CVE-2018-12547 DESCRIPTION: Eclipse OpenJ9 is vulnerable to a...

Security Bulletin: Multiple Vulnerabilities in IBM java Runtime Affect IBM Sterling External Authentication Server

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.8 used by IBM Sterling External Authentication Server. These issues were disclosed as part of the IBM Java SDK updates in January 2019. Vulnerability Details CVEID: CVE-2018-12547 DESCRIPTION: Eclipse OpenJ9 is...

Samsung Galaxy Gear series wemail_consumer_service elevation of privilege vulnerability

The Samsung Galaxy Gear series is a smartphone device. A security vulnerability exists in the Samsung Galaxy Gear series wemailconsumerservice system service, which can be exploited by a remote attacker to submit a special application request for unauthorized manipulation of a user's mailbox...

Samsung Galaxy Gear series wpa_supplicant elevation of privilege vulnerability

The Samsung Galaxy Gear series is a smartphone device. Security exists in the Samsung Galaxy Gear series wpasupplicant system service, which allows remote attackers to submit special application requests that can be utilized to elevate privileges and control the WI-FI interface...