Security Bulletin: Buffer Overflow Vulnerability in IBM DB2 SQL/PSM Stored Procedure Infrastructure (CVE-2012-4826).

Abstract Vulnerability in IBM DB2 could allow an authenticated user to cause a stack-based buffer overflow and possibly attain remote code execution. Content VULNERABILITY DETAILS CVE ID: CVE-2012-4826 DESCRIPTION: The IBM DB2 products listed below contain a security vulnerability that could allo...

Ubuntu: Security Advisory (USN-361-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability in the implementation of the Resource Manager PSM Service Extension (PsmServiceExtHost.dll) on Microsoft Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Resource Manager PSM Service Extension PsmServiceExtHost.dll implementation on Microsoft Windows operating systems is related to incorrect access control. Exploiting this vulnerability could allow an attacker to increase their privileges...

Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-34482)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Explorer PSM Service Extension in...

CVE-2021-28320

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability...

Privilege escalation

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability...

CVE-2021-28320

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability...

CVE-2021-28320

Technical details about CVE-2021-28320 (affected components, exploitability, or fixes) are not provided in the supplied documents. Monitor for updates from official advisories (MSRC/Microsoft security guides) for specifics and remediation.

CVE-2021-28320 Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability

...

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability

...

KLA12139 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of...

KB5001339: Windows 10 version 1803 Security Update (April 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072, CVE-2021-28310 - Windows Media Photo Codec Information Disclosure Vulnerability CVE-2021-27079 - Windows Event Tracing Elevati...

CVE-2020-25374

CyberArk Privileged Session Manager PSM 10.9.0.15 allows attackers to discover internal pathnames by reading an error popup message after two hours of idle time...

Code injection

CyberArk Privileged Session Manager PSM 10.9.0.15 allows attackers to discover internal pathnames by reading an error popup message after two hours of idle time...

CVE-2020-25374

CyberArk Privileged Session Manager (PSM) 10.9.0.15 is affected by a vulnerability where an error popup disclosed internal pathnames after two hours of idle time. The issue stems from a code/configuration flaw in PSM that allows an attacker to read path information from UI error messages, enablin...

CVE-2020-25374

CyberArk Privileged Session Manager PSM 10.9.0.15 allows attackers to discover internal pathnames by reading an error popup message after two hours of idle time...

openSUSE Security Update : libmodplug (openSUSE-2018-306)

This update for libmodplug fixes the following issues : Several security and non security issues where fixed : - Update to version 0.8.9.0+git20170610.f6dd59a boo1022032 : - PSM: add missing line to commit - ABC: prevent possible increment of p past end - ABC: ensure read pointer is valid before...

Code injection

In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, when a virtual server uses the standard configuration of HTTP/2 or SPDY profile with Client SSL profile, and the client initiates a number of concurrent streams...

PHP vulnerabilities CVE-2017-9226 and CVE-2017-7890

F5 Product Development has evaluated the currently supported releases for potential vulnerability. To determine if your release is known to be vulnerable, the components or features that are affected by the vulnerability, and for information about releases or hotfixes that address the...

gstreamer-plugins-bad-free: Invalid memory read in gst_ps_demux_parse_psm

The gstpsdemuxparsepsm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service invalid memory read and crash via vectors involving PSM parsing...