CVE-2019-5699

The CVE-2019-5699 issue affects NVIDIA SHIELD TV (Shield Experience) prior to v8.0.1 due to an incorrect bounds check in the NVIDIA Tegra bootloader, causing a buffer overflow that can lead to escalation of privileges and code execution (with possible information disclosure and DoS). Affected dev...

CVE-2019-5700

NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra software contains a vulnerability in the bootloader, where it does not validate the fields of the boot image, which may lead to code execution, denial of service, escalation of privileges, and information disclosure...

CVE-2019-5700

CVE-2019-5700 affects NVIDIA Shield TV (NVIDIA Tegra bootloader) before Shield Experience 8.0.1. The bootloader does not properly validate fields in the boot image, which may allow code execution, denial of service, privilege escalation, or information disclosure. NVIDIA and Red Hat entries corro...

Gamers Warned of High-Severity Intel, Nvidia Flaws

Chip giants Intel and Nvidia have stomped out high-severity flaws in two popular products, both commonly used by gamers. Impacted are the Nvidia Shield TV and Intel NUC short for Next Unit of Computing mini-PC kit. Nvidia Shield TV is a media streaming box powered by Nvidia’s Tegra X1...

CVE-2019-5700: Improper Input Validation

NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra software contains a vulnerability in the bootloader, where it does not validate the fields of the boot image, which may lead to code execution, denial of service, escalation of privileges, and information disclosure...

NVIDIA Shield TV Experience Buffer Overflow Vulnerability

The NVIDIA SHIELD TV entertainment console is a living room entertainment device released by NVIDIA. A buffer overflow vulnerability exists in the NVIDIA Tegra bootloader in NVIDIA Shield TV Experience versions prior to 8.0.1, which originates from an incorrect boundary check performed by the...

CVE-2019-5699: Improper Restriction of Operations within the Bounds of a Memory Buffer

NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra bootloader contains a vulnerability where the software performs an incorrect bounds check, which may lead to buffer overflow resulting in escalation of privileges and code execution. escalation of privileges, and information disclosure, co...

Security Bulletin: NVIDIA SHIELD TV - October 2019

NVIDIA has released a software security update for NVIDIA SHIELD® TV. This update addresses issues that may lead to information disclosure, denial of service, code execution, or escalation of privileges. To protect your system, download and install this software update through Settings About Syst...

Webshell Bypass Vulnerability in D-Shield

D Shield is a proactive defense protection software designed specifically for IIS. D Shield suffers from a webshell bypass vulnerability that can be exploited by attackers to bypass the interception of submission data...

Authorization Bypass

graphql-shield is vulnerable to authorization bypass. There is a flaw in rule setting for nocache option which uses keys generated from insecure cryptographic functions, allowing an attacker to incorrectly cache rules and access information via key collision...

Authorization Bypass

Overview Versions of graphql-shield prior to 6.0.6 are vulnerable to an Authorization Bypass. The rule caching option nocache relies on keys generated by cryptographically insecure functions, which may cause rules to be incorrectly cached. This allows attackers to access information they should n...

CVE-2019-14686

A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of products v15 Folder Shield component and the standalone Trend Micro Ransom Buster 1.0 tool in which, if exploited, would allow an attacker to load a malicious DLL, leading to elevated privileges...

CVE-2019-14686

Trend Micro 2019 consumer family (Folder Shield v15) and Trend Micro Ransom Buster 1.0 are affected by a DLL hijacking vulnerability that could allow loading a malicious DLL to achieve elevated privileges. Root cause: insecure DLL loading in the Folder Shield component and Ransom Buster. Exploita...

CVE-2019-14686: Uncontrolled Search Path Element

A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of products v15 Folder Shield component and the standalone Trend Micro Ransom Buster 1.0 tool in which, if exploited, would allow an attacker to load a malicious DLL, leading to elevated privileges...

CVE-2019-13069

extenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege Escalation to SYSTEM. The attacker must replace SilverShield.config.sqlite with a version containing an additional user account, and then use SSH and port forwarding to reach a 127.0.0.1 service...

NVIDIA Shield TV has an unspecified vulnerability

The NVIDIA SHIELD TV is a gaming console device from the American company NVIDIA. A security vulnerability exists in NVIDIA Shield TV. An attacker could exploit the vulnerability to execute code, cause a denial of service, or disclose information...

NVIDIA Shield TV Experience Privilege Permission and Access Control Vulnerability

The NVIDIA SHIELD TV entertainment console is a living room entertainment device released by NVIDIA. The NVIDIA Shield TV Experience suffers from a privilege-granting and access control vulnerability that stems from the program failing to properly authenticate the Trusted OS image. An attacker...

Unspecified Vulnerability in NVIDIA Shield TV Experience

The NVIDIA SHIELD TV entertainment console is a living room entertainment device released by NVIDIA. A security vulnerability exists in NVIDIA Shield TV Experience. An attacker could exploit the vulnerability to execute code or cause a denial of service...

CVE-2019-5681

NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the custom NVIDIA API used in the mount system service where user data could be overridden, which may lead to code execution, denial of service, or information disclosure...

CVE-2019-5681

NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the custom NVIDIA API used in the mount system service where user data could be overridden, which may lead to code execution, denial of service, or information disclosure...