CVE-2019-16900

CVE-2019-16900 affects Advantech WebAccess/HMI Designer 2.1.9.31. The issue is a User Mode Write vulnerability starting at MSVCR90!memcpy+0x15c, leading to Denial of Service as noted in CNVD and Red Hat records. CVSS scores indicate network attack, low complexity, no authentication, and impact on...

Advantech WebAccess HMI Designer User Mode Write Access Conflict Vulnerability

Advantech WebAccess HMI Designer is a human machine interface HMI runtime development software. Advantech WebAccess HMI Designer 2.1.9.31 suffers from a user mode write access conflict vulnerability starting at MSVCR90!memcpy+0x0000000000000000015c. An attacker could exploit this vulnerability to...

Microsoft DirectWrite - Invalid Read in SplicePixel While Processing OTF Fonts

Microsoft DirectWrite is a modern Windows API for high-quality text rendering. A majority of its code resides in the DWrite.dll user-mode library. It is used by a variety of widely used desktop programs such as the Chrome, Firefox and Edge browsers and constitutes an attack surface for memory...

CVE-2019-16247

Delta DCISoft 1.21 has a User Mode Write AV starting at CommLib!CCommLib::SetSerializeData+0x000000000000001b...

CVE-2019-16247

Delta DCISoft 1.21 has a User Mode Write AV starting at CommLib!CCommLib::SetSerializeData+0x000000000000001b...

Design/Logic Flaw

Delta DCISoft 1.21 has a User Mode Write AV starting at CommLib!CCommLib::SetSerializeData+0x000000000000001b...

CVE-2019-16247

CVE-2019-16247 affects Delta DCISoft 1.21. The issue is a User-Mode Write AV that starts at CommLib!CCommLib::SetSerializeData+0x1b, as described in multiple sources. The vulnerability is described as a User Mode Access Violation, with CVSS vectors indicating Local attack vector, low attack compl...

CVE-2019-16247

Delta DCISoft 1.21 has a User Mode Write AV starting at CommLib!CCommLib::SetSerializeData+0x000000000000001b...

CVE-2019-15293

An issue was discovered in ACDSee Photo Studio Standard 22.1 Build 1159. There is a User Mode Write AV starting at IDEACDStd!IEPShowPlugInDialog+0x000000000023d060...

CVE-2019-15293

An issue was discovered in ACDSee Photo Studio Standard 22.1 Build 1159. There is a User Mode Write AV starting at IDEACDStd!IEPShowPlugInDialog+0x000000000023d060...

Design/Logic Flaw

An issue was discovered in ACDSee Photo Studio Standard 22.1 Build 1159. There is a User Mode Write AV starting at IDEACDStd!IEPShowPlugInDialog+0x000000000023d060...

CVE-2019-15293

An issue was discovered in ACDSee Photo Studio Standard 22.1 Build 1159. There is a User Mode Write AV starting at IDEACDStd!IEPShowPlugInDialog+0x000000000023d060...

Authentication flaw

PCManager 9.1.3.1 has an improper authentication vulnerability. The certain driver interface of the software does not perform a validation of user-mode data properly, successful exploit could result in malicious code execution...

NVIDIA Windows GPU Display Driver Privilege License and Access Control Issues Vulnerability (CNVD-2019-28285)

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform. A security vulnerability exists in the user mode video driver trace logger component of the NVIDIA Windows GPU Display Driver all versions. An attacker could exploit...

CVE-2019-5683

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the user mode video driver trace logger component. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of...

CVE-2019-5683

CVE-2019-5683 affects NVIDIA Windows GPU Display Driver (all versions) via the user-mode video driver trace logger. The issue arises when a local attacker with system access creates a hard link and the driver fails to detect hard-link attacks, potentially enabling code execution, denial of servic...

[SECURITY] Fedora 29 Update: qemu-3.0.1-4.fc29

QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...

[SECURITY] Fedora 30 Update: qemu-3.1.0-9.fc30

QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...

Authorization Bypass

powershell is vulnerable to authorization bypass. The vulnerability exists in Windows which will allow the attacker to bypass device guard where an attacker could circumvent a user mode code integrity policy on the machine...

ACDSee Free User Mode Write Access Conflict Vulnerability

ACDSee is an image manager, viewer and editor program for Windows, macOS and iOS developed by ACD Systems International.ACDSee Free is the free version of ACDSee. ACDSee Free 1.1.21 suffers from a user mode write access conflict vulnerability starting at...