Description of the security update for Office Online Server: April 14, 2020

None None...

DEBIAN-CVE-2020-7040

storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manually deletes that fi...

Code injection

Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page...

Ransomware Gives Free Decryption Keys to Victims Who Infect Others

Researchers say they have uncovered ransomware still under development that comes with a novel and nasty twist. Infected victims of the ransomware known as Popcorn Time, have the option to either pay up, or they can opt to infect two others using a referral link. If the two new ransomware targets...

UBUNTU-CVE-2015-8966

arch/arm/kernel/sysoabi-compat.c in the Linux kernel before 4.4 allows local users to gain privileges via a crafted 1 FOFDGETLK, 2 FOFDSETLK, or 3 FOFDSETLKW command in an fcntl64 system call...

McAfee Total Protection Multiple Vulnerabilities - Windows

McAfee Total Protection is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee Total Protection Stack Buffer Overflow Vulnerability

McAfee Total Protection is a suite of antivirus software.McAfee File Lock is a file locking software that provides data encryption protection.McPvDrv.sys is one of the drivers. A stack buffer overflow vulnerability in McPvDrv.sys in McAfee File Lock by McAfee Total Protection allows a local...

McAfee Total Protection Denial of Service Vulnerability

McAfee Total Protection is a suite of antivirus software.McAfee File Lock is a file locking software that provides data encryption protection.McPvDrv.sys is one of the drivers. A security vulnerability in McPvDrv.sys in McAfee File Lock for McAfee Total Protection allows a local attacker to explo...

CVE-2015-8773

Stack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows attackers to cause a denial of service system crash via a long vault GUID in an ioctl call...

CVE-2015-8772

McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to obtain sensitive information from kernel memory or cause a denial of service system crash via a large VERIFYINFORMATION.Length value in an IOCTLDISKVERIFY ioctl call...

Stack overflow

Stack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows attackers to cause a denial of service system crash via a long vault GUID in an ioctl call...

CVE-2015-8773

Stack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows attackers to cause a denial of service system crash via a long vault GUID in an ioctl call...

CVE-2015-8772

McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to obtain sensitive information from kernel memory or cause a denial of service system crash via a large VERIFYINFORMATION.Length value in an IOCTLDISKVERIFY ioctl call...

CVE-2015-8772

CVE-2015-8772 affects McAfee Total Protection, specifically the McPvDrv.sys driver (4.6.111.0) used by McAfee File Lock. The issue arises when an IOCTL_DISK_VERIFY call uses a very large VerifyInformation.Length value, enabling local users to read sensitive data from kernel memory or trigger a sy...

CVE-2015-8773

CVE-2015-8773 describes a stack-based buffer overflow in McPvDrv.sys 4.6.111.0 within McAfee File Lock (part of McAfee Total Protection). The flaw can be triggered via a long vault GUID in an ioctl call, leading to a denial of service (system crash). Public details in the NVD entry (CVSS v3 base ...

Linux Kernel 2.6.x File Lock Lease Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15745/info Linux kernel is susceptible to a local denial-of-service vulnerability. This issue is triggered when excessive kernel memory is consumed by numerous file-lock leases. This problem stems from a memory leak in th...

Linux Kernel 2.6.x Time_Out_Leases PrintK Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15627/info Linux kernel is susceptible to a local denial-of-service vulnerability. Local attackers may trigger this issue by obtaining numerous file-lock leases, which will consume excessive kernel log memory. Once the...

Linux Kernel 2.6.10 File Lock Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12949/info A local denial of service vulnerability reportedly affects the Linux kernel. This issue arises due to a failure of the kernel to properly handle malicious, excessive file locks. An attacker may leverage this...

FICOBank Information Disclosure / Cross Site Scripting

FICOBank Directory Listing Information Disclosure / Cross Site Scripting / Jquery Old Version Vulnerable Report-Timeline: ================ 23-08-2013 Advisory Response:"Our country does not have the same laws as their own and we do not consider to be security flaws the data you send us. Thank you...

Oracle Linux 5 : kernel (ELSA-2011-0163)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0163 advisory. 2.6.18-238.1.1.0.1.el5 - fix filpclose race Joe Jin orabug 10335998 - fix missing aiocomplete in endio Joel Becker orabug 10365195 - make xenkbd.abspointer=1 by...