7973 matches found
Intel Smart Connect Technology CVE-2019-11167 Local Privilege Escalation Vulnerability
Description Intel Smart Connect Technology is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Intel Smart Connect Technology for Intel NUC products is vulnerable. Technologies Affected Intel Smart Connect Technology...
Microsoft Windows CVE-2019-1341 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain the elevated privileges on the affected system. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-bas...
Microsoft Windows Secure Boot CVE-2019-1368 Local Security Bypass Vulnerability
Description Microsoft Windows is prone to a local security-bypass vulnerability. A local attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Windows 10 Version 1803 for 32-bit Systems Microsoft Windows 10 Versi...
Microsoft Windows CVE-2019-1339 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain the elevated privileges on the affected system. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-bas...
SilverStripe assets has an unspecified vulnerability
SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . assets is one of the assets component . silverStripe assets 4.0 version of a security...
Microsoft Windows 10 Mobile CVE-2019-1314 Local Security Bypass Vulnerability
Description Microsoft Windows 10 Mobile is prone to a local security-bypass vulnerability. A local attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Windows 10 Mobile Recommendations Permit local access for...
Microsoft Windows Error Reporting CVE-2019-1319 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windows ...
Microsoft Windows CVE-2019-1336 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can leverage this issue to execute arbitrary code in the security context of the local system. Technologies Affected Microsoft Windows 10 Version 1809 for 32-bit Systems Microsoft Windows 10...
PT-2019-5674 · Red Hat · Openshift Container Platform
Name of the Vulnerable Software and Affected Versions: OpenShift Container Platform 4 Description: The issue is related to insufficient protection of log data. When the log level in an operator is set to Debug or higher, secret data written to static pod logs is not sanitized. This could allow a...
The vulnerability of the Cisco IOS XE operating system arises from errors in path name restrictions for restricted access directories, allowing attackers to execute arbitrary code on the Linux kernel.
The vulnerability of the Cisco IOS XE operating system exists due to errors in path name restrictions for restricted access directories. Exploiting this vulnerability allows a malicious individual, who operates locally and is a user of the guest operating system, to execute arbitrary code on the...
DRUPAL-CONTRIB-2019-071
This module allows display of a site's content in AMP format. The module doesn't sufficiently check access on unpublished or restricted content...
Google Android Binder CVE-2019-2215 Local Privilege Escalation Vulnerability
Description Google Android is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges. Technologies Affected Google Android 10.0 Google Android 9.0 Google Pixel 2 Recommendations Permit local access for trusted individuals only. Wher...
The vulnerability of the RubyGems package management system lies in the incorrect limitation of the path to the restricted access catalog, which allows an attacker to compromise data integrity.
The vulnerability of the RubyGems package management system is related to an incorrect limitation on the path to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to compromise data integrity...
Multiple Apple Products CVE-2019-8900 Arbitrary Code Execution Vulnerability
Description Multiple Apple Products are prone to an arbitrary code execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the user running the application. Failed exploit attempts may result in a denial-of-service condition. Technologies Affected...
The vulnerability of the SMB server’s configuration file smb.conf, which is part of the Samba networking software package, allows a hacker to gain unauthorized access to protected information.
The vulnerability of the SMB server’s configuration file smb.conf in the Samba networking software package is related to deficiencies in pathname validation for restricted access directories. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized...
The vulnerability of the _unzip_iter() function in the natural language processing and statistical processing library NLTK allows a hacker to write arbitrary files.
The vulnerability of the unzipiter function in the natural language processing and statistical processing library NLTK is related to an incorrect limitation on the path name for the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to write arbitrary files...
3S-Smart Software Solutions CODESYS V3 web server path traversal vulnerability
3S-Smart Software Solutions CODESYS V3 web server is a web server used in CODESYS products from 3S-Smart Software Solutions, Germany. A path traversal vulnerability exists in 3S-Smart Software Solutions CODESYS V3 web server versions prior to 3.5.14.10, which can be exploited by an attacker sendi...
PHP 'unserialize()' Stack Buffer Overflow Vulnerability
Description PHP is prone to a remote stack-based buffer-overflow because it fails to adequately bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issue to cause a denial-of-service condition. Due to the nature of this issue, code...
CVE-2019-13532
CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller...
PT-2019-13356 · Telestar +3 · Telestar Bobs Rock Radio +11
Name of the Vulnerable Software and Affected Versions: TELESTAR Bobs Rock Radio version affected versions not specified Dabman D10 version affected versions not specified Dabman i30 Stereo version affected versions not specified Imperial i110 version affected versions not specified Imperial i150...