Archive
19 August 2019
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
High 7.3
A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege …
-
High 7.8
Rapid7 InsightAppSec Local Privilege Escalation
The Rapid7 InsightAppSec broker suffers from a DLL injection vulnerability in the 'prunsrv.exe' component of the product. If exploited, a local user of the system (who must already be authenticated to the operating system) can elevate their privileges with th…
-
High 7.5
Inline DTD allows XML bomb attack
The SweetXml (aka sweet_xml) package through 0.6.6 for Erlang and Elixir allows attackers to cause a denial of service (resource consumption) via an XML entity expansion attack with an inline DTD.