IBM MQ Library Elevation of Privilege Vulnerability

IBM MQ formerly known as IBM WebSphere MQ is a messaging middleware product from IBM. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A security vulnerability exists in the IBM MQ library. An attacker can exploit the vulnerability t...

PT-2018-1812

Name of the Vulnerable Software and Affected Versions Windows 10 version 1809 Windows Server 2019 Description The issue is related to errors in the installation procedure of the Windows operating system from physical media, such as USB or DVD. Exploitation of this issue may allow an attacker to...

PT-2018-1876

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows 8.1 Windows 7 Windows Server 2019 Description The issue is related to the Microsoft RemoteFX Virtual GPU miniport driver's handling of objects in memory, which can lead to an elevation of privilege. This...

PT-2018-1799

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue exists due to improper handling of objects in memory by a component of the Windows operating system, specifically related to DirectX. This can allow an attacker to elevate their...

PT-2018-18587 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: An elevation of privilege issue exists due to improper sanitization of specially crafted web requests to affected SharePoint servers. This could allow an attacker to...

Intel® RAID Web Console 3 Cross-site Scripting Vulnerability Advisory

Summary: A potential security vulnerability in the Intel® RAID Web Console RWC may allow remote manipulation of RWC console output. Intel is releasing RAID Web Console updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-3699 Description: Cross-site scripting i...

D-LINK Central WifiManager CWM-100 Trojan File SYSTEM Elevation of Privilege Vulnerability

D-LINK Central WifiManager CWM-100 is D-LINK centralized wireless management software. D-Link Central WiFiManager CWM-100 1.03 r0098 device will load the Trojan horse "quserex.dll" and will create a new thread running SYSTEM integrity...

PT-2018-3542

Name of the Vulnerable Software and Affected Versions: Compound Price Oracle versions 1.0 through 2.0 Description: The issue concerns the price oracle in Compound Finance's Compound Price Oracle, where the setPrice function in PriceOracle.sol lacks sufficient input validation. This allows a price...

LiquidVPN For macOS Elevation of Privilege Vulnerability

LiquidVPN For MacOS is a VPN software for anonymous access to the Internet based on the MacOS platform. An elevation of privilege vulnerability exists in the 'openvpncmd' parameter in LiquidVPN For MacOS 1.37 and 1.36 and earlier versions. An attacker can exploit this vulnerability to gain elevat...

Design/Logic Flaw

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate...

About the security content of macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra

About the security content of macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra This document describes the security content of macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra. About Apple security updates For o...

About the security content of watchOS 5.1

About the security content of watchOS 5.1 This document describes the security content of watchOS 5.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of iCloud for Windows 7.4 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

CVE-2018-11080: Incorrect Permission Assignment for Critical Resource

Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains Improper File Permission Vulnerabilities. The application contains multiple configuration files with world-readable permissions that could allow an authenticated malicious user to utilize the file contents to potentially...

PT-2018-10292

Name of the Vulnerable Software and Affected Versions Dell EMC Secure Remote Services versions prior to 3.32.00.08 Description The issue is related to improper file permissions in configuration files. These files have world-readable permissions, which could allow an authenticated malicious user t...

CVE-2018-8453

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Serv...

Quick Heal Technologies Seqrite EndPoint Security Elevation of Privilege Vulnerability

Quick Heal Technologies Seqrite EndPoint Security EPS is a suite of endpoint security protection solutions from Quick Heal Technologies India. The product features device control, vulnerability scanning, patch management and asset management. An elevation of privilege vulnerability exists in Quic...

Adobe Technical Communications Suite DLL Load Local Elevation of Privilege Vulnerability

Adobe Technical Communications Suite is a set of information management suite from the American company Audobee Adobe. The product supports users to create, manage and publish technical documents, books and other content. A DLL load local elevation of privilege vulnerability exists in Adobe...

Microsoft SharePoint Enterprise Server Remote Elevation of Privilege Vulnerability

Microsoft SharePoint Enterprise Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A...

PT-2018-2048

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Enterprise Server affected versions not specified Description The issue is related to access control errors in Microsoft SharePoint Enterprise Server. An attacker could exploit this by sending a specially crafted request t...