UltraVNC out-of-bounds access vulnerability (CNVD-2019-10286)

UltraVNC is an open source remote terminal control software for Windows platform.Ultra2 decoder is one of the Ultra2 decoders. A security vulnerability exists in the VNC client for the Ultra2 decoder in UltraVNC version 1203. An attacker can exploit the vulnerability to execute code out-of-bounds...

UltraVNC Code Execution Vulnerability

UltraVNC is an open source remote terminal control software for the Windows platform. A security vulnerability exists in the VNC server code in UltraVNC version 1211. An attacker could exploit the vulnerability to execute code...

PT-2019-19768 · Google · Go

Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.12.2 Description: The issue is related to the misuse of certain LoadLibrary functionality in Go on Windows, leading to DLL injection. Recommendations: For Go versions prior to 1.12.2, update to version 1.12.2 or later t...

CVE-2019-0599

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0625...

DEBIAN-CVE-2019-6233

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-6235

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions...

NVIDIA Windows GPU Display Driver Denial of Service Vulnerability (CNVD-2019-28601)

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver dedicated to the Windows platform. A denial of service vulnerability exists in NVIDIA Windows GPU Display Driver, which can be exploited by attackers to cause a denial of service and elevation of privilege...

NVIDIA Windows GPU Display Driver Denial of Service Vulnerability (CNVD-2019-28599)

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver dedicated to the Windows platform. A denial of service vulnerability exists in NVIDIA Windows GPU Display Driver. An attacker could exploit this vulnerability to cause a denial of service, elevate privileges, or...

Vulnerability of the Server component: The MySQL database management system on Windows systems, which allows attackers to cause service interruptions.

The vulnerability of the Server component: Oracle MySQL database management systems in Windows operating systems are vulnerable due to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2019-1639

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording...

CVE-2019-1638

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording...

WebKit Assertion Failure Vulnerability in Multiple Apple Products (CNVD-2019-04706)

Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems. iTunes for Windows is a media player and application for the Windows platform. WebKit is one of the web browser engine components...

Google Chrome for Mac, Windows and Linux V8 Security Bypass Vulnerability

Google Chrome for Mac, Windows and Linux is a web browser based on Mac, Windows and Linux platforms developed by Google USA.V8 is one of the open source JavaScript engines. A security vulnerability exists in V8 in versions of Google Chrome prior to 64.0.3282.167 for Mac and Linux-based platforms...

Intel SSD Data Center Tool for Windows Elevation of Privilege Vulnerability

Intel SSD Data Center Tool for Windows is a Windows-based SSD management tool from Intel USA. It supports configuration of SSDs using PCIe and SATA and detects the status of SSDs. A security vulnerability exists in versions of Intel SSD Data Center Tool prior to 3.0.17 for Windows-based platforms...

Intel System Support Utility for Windows Elevation of Privilege Vulnerability

Intel System Support Utility for Windows is a Windows platform-based system support utility from Intel USA. The program is mainly used to identify the hardware model, operating system version and software installed on the computer. A security vulnerability exists in versions of Intel System Suppo...

CVE-2018-18098

Improper file verification in install routine for IntelR SGX SDK and Platform Software for Windows before 2.2.100 may allow an escalation of privilege via local access...

The vulnerability of the software update service for Cisco WebEx Meetings Desktop App and WebEx Productivity Tools for Windows operating systems allows a malicious individual to execute arbitrary commands.

The vulnerability of the software update service for Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows operating systems is related to the improper handling of special elements used in the operating system’s command line. Exploiting this vulnerability can allow an attacker...

CVE-2019-5007

An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is an Out-of-Bounds Read Information Disclosure and crash due to a NULL pointer dereference when reading TIFF data during TIFF parsing...

IBM Notes and Domino Privilege Permission and Access Control Vulnerabilities

IBM Notes and Domino are both collaborative office software from the American company IBM. The software has office features such as e-mail, calendar, and scheduling. A privilege permission and access control vulnerability exists in the Notes System Diagnostic NSD service in IBM Notes and Domino o...

McAfee Agent Temporary File Insecurity Handling Vulnerability

McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator antivirus management platform and managed products. A security vulnerability exists in MA versions 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 on non-Windows-based platforms...