5481 matches found
CVE-2019-0088
Insufficient path checking in IntelR System Support Utility for Windows before 2.5.0.15 may allow an authenticated user to potentially enable an escalation of privilege via local access...
CVE-2019-0088
Intel System Support Utility for Windows prior to 2.5.0.15 is affected by CVE-2019-0088 due to insufficient path checking, enabling an authenticated user to potentially escalate privileges via local access. The vulnerability is documented across CVE records and Intel’s advisory, which confirms af...
Intel Patches High-Severity Privilege-Escalation Bugs
Intel on Tuesday patched three high-severity vulnerabilities that could allow the escalation of privileges across an array of products. Overall, the chip giant fixed five bugs – three rated high-severity, and two medium-severity. The most concerning of these bugs is an escalation-of-privilege...
Intel® System Support Utility for Windows* Advisory
Summary: A potential security vulnerability in Intel® System Support Utility for Windows may allow an escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-0088 Description: Insufficient path checking in Intel...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2018-1798)
Summary IBM WebSphere Application Server is shipped as a component of IBM Case Manager. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin:...
CVE-2018-15331
On BIG-IP AAM 13.0.0 or 12.1.0-12.1.3.7, the dcdbconvert utility used by BIG-IP AAM fails to drop group permissions when executing helper scripts, which could be used to leverage attacks against the BIG-IP system...
Intel System Defense Utility Elevation of Privilege Vulnerability
Intel System Defense Utility is a tool from Intel Corporation USA for remotely configuring the security of PCs supporting Intel vPro technology. The product is mainly used for security configuration of Intel vPro features and SMB environments. An elevation of privilege vulnerability exists in the...
CVE-2018-3705
Improper directory permissions in the installer for the IntelR System Defense Utility all versions may allow authenticated users to potentially enable a denial of service via local access...
Input validation
Improper directory permissions in the installer for the IntelR System Defense Utility all versions may allow authenticated users to potentially enable a denial of service via local access...
CVE-2018-3705
CVE-2018-3705 affects Intel® System Defense Utility (all versions). The vulnerability arises from improper directory permissions in the installer, which could allow an authenticated local attacker to cause a denial of service. Intel’s advisory INTEL-SA-00209 states there are no mitigations/update...
The vulnerability of the `free` function in the beep utility allows a hacker to gain access to confidential information or block the execution of arbitrary applications.
The vulnerability of the free function in the beep utility is related to the occurrence of a “race condition” when signal handlers that send signals SIGINT and SIGTERM to the free function are used. Exploiting this vulnerability can allow an attacker to gain access to confidential information or ...
TA505 Crooks are Now Targeting US Retailers with Personalized Campaigns
Cybercriminals behind the notorious Dridex and Locky ransomware have a new target in their sights – large retail, restaurant and grocery chains located in the US. Researchers are warning the well-known financial criminal group TA505 is behind a new wave of email campaigns distributing personalize...
Panasonic applications register unquoted service paths
Overview Some pre-installed applications on Panasonic PCs register Windows services with unquoted file paths CWE-428. Panasonic Corporation reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Panasonic Corporation coordinated under the Information...
Asynchronous Target Enumeration Tool: bscan
bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console output and a well-defined directory structure. bscan was written ...
Updated patch packages fix security vulnerabilities
A NULL pointer dereference flaw was found in the way patch processed patch files. An attacker could potentially use this flaw to crash patch by tricking it into processing crafted patches CVE-2018-6951. A double-free flaw was found in the way the patch utility processed patch files. An attacker...
MGASA-2018-0448 Updated patch packages fix security vulnerabilities
A NULL pointer dereference flaw was found in the way patch processed patch files. An attacker could potentially use this flaw to crash patch by tricking it into processing crafted patches CVE-2018-6951. A double-free flaw was found in the way the patch utility processed patch files. An attacker...
Intel Extreme Tuning Utility 6.4.1.23 - BOF DoS Vulnerability
Document Title: =============== Intel Extreme Tuning Utility 6.4.1.23 - BOF DoS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2165 ID: INTEL-SA-00162 https://nvd.nist.gov/vuln/detail/CVE-2018-12151...
Intel Extreme Tuning Utility 6.4.1.23 - DoS Vulnerability
Document Title: =============== Intel Extreme Tuning Utility 6.4.1.23 - DoS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2165 ID: INTEL-SA-00162 https://nvd.nist.gov/vuln/detail/CVE-2018-12151...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Installation Manager and IBM Packaging Utility
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 used by IBM Installation Manager and IBM Packaging Utility. The IBM Installation Manager and IBM Packaging Utility have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-1656 DESCRIPTION: The...
F5 Networks BIG-IP : SQL injection vulnerability (K39428424)
The SQL injection vulnerability in the Configuration utility is related to the BIG-IP AFM system.CVE-2017-0304 Impact An attacker can exploit this vulnerabilityregardless of the BIG-IP AFM provisioning configuration; however, exploiting this vulnerability does not impact traffic processing or the...