CVE-2015-7963

SafeNet Authentication Service for AD FS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module...

CVE-2015-7963

SafeNet Authentication Service for AD FS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module...

CVE-2015-7966

Technical details for CVE-2015-7966 are not publicly available in the provided documents; no affected products, versions, or remediation are specified here. Monitor for updates.

CVE-2015-7597

SafeNet Authentication Service IIS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module...

CVE-2015-7961

Technical details about CVE-2015-7961 are not provided in the connected documents; the Initial Description mentions privilege escalation from weak ACLs but provides no product/version specifics. Monitor for updates.

CVE-2015-7596

Technical details about CVE-2015-7596 are not publicly available in the provided documents; monitor for updates from official advisories and vendors.

CVE-2015-7964

Technical details for CVE-2015-7964 are not publicly available in the provided connected documents; no affected products, vulnerable components, or mitigations are specified here. Monitor for updates.

CVE-2015-7598

The CVE-2015-7598 entry concerns SafeNet Authentication Service TokenValidator Proxy Agent. Affected component: the TokenValidator Proxy Agent. Root cause: uses a weak ACL for unspecified installation directories and executable modules, enabling a local user to gain privileges by modifying an exe...

CVE-2015-7962

Technical details about CVE-2015-7962 are not provided in the connected documents; public information in the initial description is limited. Monitor for updates from vendors and ENISA/NVD.

CVE-2015-7967

CVE-2015-7967 affects SafeNet Authentication Service for Citrix Web Interface Agent. The issue arises from a weak ACL on unspecified installation directories and executable modules, enabling local users to escalate privileges by modifying an executable module. The provided sources include CVSS me...

CVE-2015-7597

Technical details for CVE-2015-7597 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-7965

Technical details about CVE-2015-7965 are not publicly available in the provided documents; connected sources list related entries with generic malware notes. Monitor for updates.

CVE-2015-0796 open build service source server symlink exploitation via source patch

In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application could generate non-standard files like symlinks or device nodes, which could allow buildservice users to break of confinement or cause denial of service attacks on the source service...

CVE-2015-0796

The vulnerability CVE-2015-0796 affects the Open Build Service: versions 2.6 before 2.6.3, 2.5 before 2.5.7, and 2.4 before 2.4.8. The patch application in the source service could generate non-standard files (e.g., symlinks or device nodes), which may allow buildservice users to break confinemen...

[SECURITY] Fedora 26 Update: php-phpmyadmin-sql-parser-4.2.4-3.fc26

A validating SQL lexer and parser with a focus on MySQL dialect. This library was originally developed for phpMyAdmin during the Google Summer of Code 2015. Autoloader: /usr/share/php/PhpMyAdmin/SqlParser/autoload.php...

CVE-2015-5079

Directory traversal vulnerability in widgets/logs.php in BlackCat CMS before 1.1.2 allows remote attackers to read arbitrary files via a .. dot dot in the dl parameter...

CVE-2015-5079

CVE-2015-5079 is a concrete path traversal vulnerability in BlackCat CMS, affecting the widget at widgets/logs.php. The issue arises from insufficient validation of the dl parameter, allowing remote attackers to read arbitrary local files (e.g., config.php) via directory traversal sequences ("../...

CVE-2015-4117

Vesta Control Panel prior to 0.9.8-14 is vulnerable to OS command injection in the backup parameter of /list/backup/index.php. An authenticated user can inject shell metacharacters to execute arbitrary commands with admin privileges, potentially compromising the entire panel. Remediation: upgrade...

CVE-2015-4117

Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup parameter to list/backup/index.php...

CVE-2015-3898

Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the redirectUrl parameter to 1 bonita/login.jsp or 2 bonita/loginservice...