8641 matches found
CVE-2018-1890
IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081...
CVE-2018-1890
IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081. Recent assessments: timb-machine at March 05, 2021 12:26am UTC reported: Unlikely to be setUID, unlikely that you...
CVE-2018-1890: Uncontrolled Search Path Element
IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081...
CVE-2019-1602
A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive data that could be used to elevate their privileges to administrator. The vulnerability is due to improper implementation of filesystem permissions. An attacker...
Input validation
A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive data that could be used to elevate their privileges to administrator. The vulnerability is due to improper implementation of filesystem permissions. An attacker...
CVE-2019-0649
A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'...
CVE-2018-1890
IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081...
CVE-2019-6225
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to elevate privileges...
Memory corruption
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to elevate privileges...
Cross site scripting
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, iTunes 12.9.3 for Windows. A malicious application may be able to elevate privileges...
CVE-2019-6225
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to elevate privileges...
CVE-2019-6202
CVE-2019-6202 affects Apple platforms (iOS, macOS, watchOS). It is an out-of-bounds read issue resolved by updates: iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. The issue allowed a malicious application to elevate privileges; root cause described as out-of-bounds read corrected with improved ...
CVE-2019-6221: Out-of-bounds Read
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, iTunes 12.9.3 for Windows. A malicious application may be able to elevate privileges...
Google Android Media framework elevation of privilege vulnerability (CNVD-2019-23554)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Media framework component of Google Android 9. An attacker can exploit this vulnerability to cause a local escalation of...
CVE-2019-6225: Out-of-bounds Write
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to elevate privileges...
CVE-2019-6202: Out-of-bounds Read
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. A malicious application may be able to elevate privileges...
PT-2019-18036
Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.1.3 macOS Mojave versions prior to 10.14.3 tvOS versions prior to 12.1.2 Description A memory corruption issue was addressed with improved validation. A malicious application may be able to elevate privileges...
PT-2019-4266
Name of the Vulnerable Software and Affected Versions Windows 7 Description The issue is related to an untrusted search path vulnerability, which allows an attacker to gain privileges. This can be achieved via a Trojan horse DLL in an unspecified directory. The vulnerability is also described as...
NVIDIA Windows GPU Display Driver Denial of Service Vulnerability (CNVD-2019-28600)
NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver dedicated to the Windows platform. The NVIDIA Windows GPU Display Driver denial of service vulnerability can be exploited by attackers to cause a denial of service or elevation of privilege...
NVIDIA Windows GPU Display Driver Privilege License and Access Control Issues Vulnerability
The NVIDIA Windows GPU Display Driver is a display driver for Windows systems. A vulnerability exists in the 3D visual component of the NVIDIA Windows GPU display driver. The vulnerability stems from the Stereo Services software not checking for hard links when opening files. An attacker could us...