Skip to content
OpenAdvisories

Archive

19 August 2019

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.3

    A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege …

  • High 7.8

    Rapid7 InsightAppSec Local Privilege Escalation

    The Rapid7 InsightAppSec broker suffers from a DLL injection vulnerability in the 'prunsrv.exe' component of the product. If exploited, a local user of the system (who must already be authenticated to the operating system) can elevate their privileges with th…

  • High 7.5

    Inline DTD allows XML bomb attack

    The SweetXml (aka sweet_xml) package through 0.6.6 for Erlang and Elixir allows attackers to cause a denial of service (resource consumption) via an XML entity expansion attack with an inline DTD.