68 matches found
USN-1648-1: Linux kernel vulnerabilities
Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...
USN-1646-1: Linux kernel vulnerabilities
Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...
USN-1645-1: Linux kernel (OMAP4) vulnerabilities
Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Dmitry Monakhov reported a race condition flaw the Linux ext4 filesystem that can expose stale data. An unprivileged user could exploit...
CVE-2008-6537
LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the administrator password via the setup "do" action to LightNEasy.php, which is cleared from $GET but later accessed using $REQUEST...
CVE-2008-6537
CVE-2008-6537 affects LightNEasy (LightNEasy No database version 1.2) and stems from LightNEasy.php: the setup action “do” clears the parameter from $_GET but later reads via $_REQUEST, allowing remote attackers to obtain the administrator password hash. The vulnerability’s impact is partial conf...
CVE-2008-6537
creationtimestamp| type| source ---|---|--- 2008-04-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5425...
CVE-2007-6537
CVE-2007-6537 affects WinUAE 1.4.4 and earlier. A stack-based buffer overflow in the zfile_gunzip function (zfile.c) can be triggered by a long filename inside a gzipped archive (gz/adz/roz/hdz) embedded in a compressed floppy disk image, permitting user-assisted remote code execution. The vulner...
CVE-2006-6537
IBM WebSphere Host On-Demand versions 6.0–9.0 (and possibly 10) areAffected by CVE-2006-6537 due to an authentication bypass via a modified pnl parameter in hod/HODAdmin.html and hod/frameset.html. This remote-auth bypass vulnerability could allow an attacker to gain access without valid credenti...