CVE-2019-18249

The CVE-2019-18249 issue affects Reliable Controls MACH-ProWebSys and MACH-ProWebCom/Sys (all versions prior to 2.15; firmware prior to 8.26.4). It is a Cross‑Site Scripting (CWE-79) vulnerability where an authenticated user clicking on a malicious link can cause the attacker to execute commands ...

Reliable Controls MACH-ProWebCom/Sys Cross-Site Scripting Vulnerability

The Reliable Controls MACH-ProWebCom/Sys is a building controller from Canada's Reliable Controls that supports custom programming and has a built-in web server. A cross-site scripting vulnerability exists in Reliable Controls MACH-ProWebCom/Sys, which can be exploited by an attacker to execute...

CVE-2019-19516

Intelbras WRN 150 1.0.18 devices allow CSRF via GO=systempassword.asp to the goform/SysToolChangePwd URI to change a password...

CVE-2019-16767

The admin sys mode is now conditional and dedicated for the special case. By default, since [email protected] no instance container is launched with advanced capabilities not launched as root...

CVE-2019-16767

CVE-2019-16767 affects ezmaster docker containers prior to version 5.2.11, where instances could be launched with advanced capabilities (not launched as root was not guaranteed). The description states that as of ezmaster 5.2.11, containers are no longer started with these elevated privileges. CV...

CVE-2019-19197

IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an attacker to achieve privilege escalation, denial-of-service, and code execution via usermode because 0x9C402401 using METHODNEITHER results in a read primitive...

SYS.2.2.3.A18

Ziel des Bausteins SYS.2.2.3 ist der Schutz von Informationen, die durch und auf Windows 10-Clients verarbeiten werden. Die Standard-Anforderung SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

SYS.2.2.3.A15

Ziel des Bausteins SYS.2.2.3 ist der Schutz von Informationen, die durch und auf Windows 10-Clients verarbeiten werden. Die Standard-Anforderung SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

Improper access control

Insufficient access control in ilp60x64.sys driver for IntelR Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-0142

Insufficient access control in ilp60x64.sys driver for IntelR Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileged user to potentially enable escalation of privilege via local access...

NVIDIA Windows GPU Display Driver Elevation of Privilege and Denial of Service Vulnerability

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform. An elevation of privilege and denial of service vulnerability exists in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in the NVIDIA Windows GPU Display...

Patriot Viper RGB Local Elevation of Privilege Vulnerability

The Patriot Viper RGB is a memory module device from Patriot Corporation of Taiwan, China. A local elevation of privilege vulnerability exists in the MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB versions prior to 1.1, which can be exploited by a local attacker to read or write to memory...

CVE-2016-4289

A stack based buffer overflow vulnerability exists in the method receiving data from SysTreeView32 control of the GMER 2.1.19357 application. A specially created long path can lead to a buffer overflow on the stack resulting in code execution. An attacker needs to create path longer than 99...

PT-2019-6314

Name of the Vulnerable Software and Affected Versions MSI Afterburner versions 4.6.2.15658 and earlier Description The issue is related to a buffer overflow in the MSI Afterburner utility, allowing an attacker to elevate privileges, execute arbitrary code with high privileges, and disclose...

Stack overflow

NDrive1.2.2.sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle...

GLSA-201908-22 : Patch: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201908-22 Patch: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Patch. Please review the CVE identifiers referenced below for details. Impact : A local attacker could pass a specially crafted diff file t...

CVE-2016-10769

cPanel before 60.0.25 allows an open redirect via /cgi-sys/FormMail-clone.cgi SEC-162...

CVE-2018-15738

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000205F...

CVE-2018-15738

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000205F...

CVE-2018-15738

The CVE-2018-15738 entry affects STOPzilla AntiMalware 6.5.2.59. The vulnerability is an Arbitrary Write in the driver szkg64.sys caused by failing to validate the output buffer address from IOCTL 0x8000205F. The connected records corroborate this description but do not provide explicit exploit d...