daemon/archive.go Component Privilege Escalation

The vulnerability in the daemon/archive.go component of the automation tool for deploying and managing applications in Docker-enabled environments is related to synchronization errors when using a shared resource. This “race condition” allows an attacker to increase their privileges and gain acce...

CVE-2019-2860

Vulnerability in the Oracle Clusterware component of Oracle Support Tools subcomponent: Trace File Analyzer TFA Collector. The supported version that is affected is 12.1.0.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

Oracle Solaris vulnerable to arbitrary code execution via /proc/self

Overview Oracle Solaris 11 and Solaris 10 are vulnerable to arbitrary code execution if an attacker has read/write access to /proc/self in the process file system. Description The process file system /proc in Oracle Solaris 11 and Solaris 10 provides a self/ alias that refers to the current...

Authorization

An authorization bypass vulnerability in pinboard updates in ThoughtSpot 4.4.1 through 5.1.1 before 5.1.2 allows a low-privilege user with write access to at least one pinboard to corrupt pinboards of another user in the application by spoofing GUIDs in pinboard update requests, effectively...

Docker Elevation of Privilege Vulnerability

Summary CVE-2018-15664 describes a vulnerability in the Docker runtime and the underlying community project, Moby wherein a malicious/compromised container can acquire full read/write access to the host operating system where that container is running. The vulnerability depends on the way that th...

ACDSee Free User Mode Write Access Conflict Vulnerability (CNVD-2019-24226)

ACDSee is an image manager, viewer and editor program for Windows, macOS and iOS developed by ACD Systems International.ACDSee Free is the free version of ACDSee. ACDSee Free 1.1.21 suffers from a user mode write access conflict vulnerability starting at IDEACDStd!JPEGTransW+0x0000000000002450. A...

ACDSee Free User Mode Write Access Conflict Vulnerability

ACDSee is an image manager, viewer and editor program for Windows, macOS and iOS developed by ACD Systems International.ACDSee Free is the free version of ACDSee. ACDSee Free 1.1.21 suffers from a user mode write access conflict vulnerability starting at...

IrfanView User Mode Write Access Conflict Vulnerability (CNVD-2019-42242)

IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. IrfanView 4.52 suffers from a user-mode write access conflict vulnerability starting at image00400000+0x0000000000013a98. An...

ACDSee Free User Mode Write Access Conflict Vulnerability (CNVD-2019-24223)

ACDSee is an image manager, viewer and editor program for Windows, macOS and iOS developed by ACD Systems International.ACDSee Free is the free version of ACDSee. ACDSee Free 1.1.21 suffers from a user mode write access conflict vulnerability starting at...

IrfanView User Mode Write Access Conflict Vulnerability

IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. IrfanView 4.52 suffers from a user-mode write access conflict vulnerability starting at image00400000+0x00000000000249c6. An...

CVE-2019-13262

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb...

CVE-2019-13257

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003273aa...

CVE-2019-13255

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327464...

CVE-2019-13246

FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a9601...

KLA11649 User Mode Write Access Violation vulnerabilities in IrfanView

User Mode Write Access Violation vulnerabilities were found in IrfanView. Malicious users can exploit this vulnerability to cause denial of service. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products IrfanView CVE list CVE-2019-13242 critical...

Cisco Integrated Management Controller Configuration Import Write Access

The vulnerability of the configuration import utility for the Cisco Integrated Management Controller remote management software lies in the lack of authentication for a critical function. Exploiting this vulnerability allows a malicious actor to gain write access and load any data into the file...

CVE-2019-13083

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a...

CVE-2019-1629

A vulnerability in the configuration import utility of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem. The vulnerability is due to a failure to delete temporarily uploaded files. An attack...

Design/Logic Flaw

A vulnerability in the configuration import utility of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem. The vulnerability is due to a failure to delete temporarily uploaded files. An attack...

PT-2019-2551

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC affected versions not specified Description A vulnerability in the configuration import utility of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to have...