CVE-2019-3744

Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a Universal Windows Platform application by manipulating the install software package feature with a race condition and a path traversal explo...

Race condition

Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a Universal Windows Platform application by manipulating the install software package feature with a race condition and a path traversal explo...

CVE-2019-3744

Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a Universal Windows Platform application by manipulating the install software package feature with a race condition and a path traversal explo...

PT-2019-16686 · Dell · Dell/Alienware Digital Delivery

Name of the Vulnerable Software and Affected Versions: Dell/Alienware Digital Delivery versions prior to 4.0.41 Description: The issue allows a local non-privileged malicious user to exploit a Universal Windows Platform application. This is achieved by manipulating the install software package...

Cisco Webex Network Recording Player and Cisco Webex Player Buffer Overflow Vulnerability

Cisco WebEx Network Recording Player is an application for playing back WebEx meeting recordings recorded on the computers of online meeting participants.Cisco Webex Player is Cisco's player for playing back video meeting recordings. A buffer overflow vulnerability exists in Cisco Webex Network...

Cisco Webex Network Recording Player and Cisco Webex Player Buffer Overflow Vulnerability (CNVD-2020-16484)

Cisco WebEx Network Recording Player is an application for playing back WebEx meeting recordings recorded on the computers of online meeting participants.Cisco Webex Player is Cisco's player for playing back video meeting recordings. A buffer overflow vulnerability exists in Cisco Webex Network...

CVE-2019-1924

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist because the affected software improperly validates Advanced...

CVE-2019-1925

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist because the affected software improperly validates Advanced...

Code Execution Vulnerability in DouPHP_1.5

DouPHP1.5 is a lightweight enterprise website management system, based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. DouPHP1.5 suffers from a code execution vulnerability that can be exploited by attackers to execute arbitrary code...

McAfee Data Loss Prevention Endpoint Cross-Site Scripting Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from McAfee. The solution prevents theft and accidental disclosure of confidential data and provides security policies for file handling and transmission, shared endpoint data flow control and data...

CVE-2019-2799

Vulnerability in the Oracle ODBC Driver component of Oracle Database Server PRIVILEGE CANNOT BE NONE FOR AUTHENTICATED ATTACKS. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Difficult to exploit vulnerability allows low privileged attacker having None privilege wi...

CVE-2019-2799

Vulnerability in the Oracle ODBC Driver component of Oracle Database Server PRIVILEGE CANNOT BE NONE FOR AUTHENTICATED ATTACKS. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Difficult to exploit vulnerability allows low privileged attacker having None privilege wi...

Oracle Database Server Multiple Vulnerabilities (Jul 2019 CPU)

The remote Oracle Database Server is missing the July 2019 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - An unspecified vulnerability in the Spatial component of Oracle Database Server, which could allow an authenticated, remote attacker to cause a partial...

KLA11521 Multiple vulnerabilities in Oracle VirtualBox

Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Multiple vulnerabilities in Core component of Oracle VM VirtualBox can be...

Foxit Reader and Foxit PhantomPDF Information Disclosure Vulnerability (CNVD-2019-21939)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. An information disclosure vulnerability exists in Foxit Reader 9.5.0.20723 and earlier versions and Foxit PhantomPDF 9.5.0.20723 and earlier versions for Windows platforms. The vulnerability stems from a...

Lenovo Service Bridge Command Injection Vulnerability

Lenovo Service Bridge is a Windows-based application from the Chinese company Lenovo Lenovo. The program is able to automatically detect the serial number, device type and model of the device in order to provide the appropriate services. A security vulnerability exists in Lenovo Service Bridge. A...

Adobe Campaign Classic Information Disclosure Vulnerability (CNVD-2019-18623)

Adobe Campaign Classic ACC is a suite of cross-channel customer experience marketing platforms from the American company Audobee Adobe. The platform features real-time interaction management, Adobe Experience Cloud integration, data management and integration. An information disclosure...

WampServer Cross-Site Request Forgery Vulnerability (CNVD-2019-17113)

WampServer is a Windows-based Web development platform . The platform integrates Apache, MySQL and PHP development environment. A cross-site request forgery vulnerability exists in the addvhost.php file in WampServer versions prior to 3.1.9. The vulnerability stems from the WEB application not...

Mozilla Firefox and Mozilla Firefox ESR crash generation server resource management error vulnerability

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation.Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. crash generation server is one of the crash information generation servers. A resource...

DeviceViewer suffers from a password field overflow vulnerability

DeviceViewer is a Windows-based IP camera viewing application. DeviceViewer suffers from a password field overflow vulnerability that can be exploited by an attacker to gain privileges on a user's system...