CVE-2018-8895

In 2345 Security Guard 3.6, the driver file 2345DumpBlock.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222040...

Input validation

In 2345 Security Guard 3.6, the driver file 2345DumpBlock.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222040...

Input validation

In 2345 Security Guard 3.6, the driver file 2345DumpBlock.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222044...

CVE-2018-8894

The CVE applies to 2345 Security Guard version 3.6. A local attacker can trigger a denial of service (BSOD) via the driver file 2345BdPcSafe.sys, caused by input validation failure for IOCTL 0x00222108. Exploitation details are documented in NVD/NVD-derived references; exploitation attempts or in...

Webmin 0.92 Multiple Vulnerabilities

According to its self-reported version, the Webmin install hosted on the remote host is 0.92 It is, therefore, affected by multiple vulnerabilities which could allow local users to execute script. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid108538;...

Webmin 1.720 Read Mail Symlink Vulnerability

According to its self-reported version, the Webmin install hosted on the remote host is 1.720 It is, therefore, affected by a vulnerability in the Read Mail module which allows local users to read arbitrary files. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108556...

DEBIAN-CVE-2017-18241

fs/f2fs/segment.c in the Linux kernel before 4.13 allows local users to cause a denial of service NULL pointer dereference and panic by using a noflushmerge option that triggers a NULL value for a flushcmdcontrol data structure...

UBUNTU-CVE-2017-18241

fs/f2fs/segment.c in the Linux kernel before 4.13 allows local users to cause a denial of service NULL pointer dereference and panic by using a noflushmerge option that triggers a NULL value for a flushcmdcontrol data structure...

CVE-2018-8873

In 2345 Security Guard 3.6, the driver file 2345NetFirewall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222040...

CVE-2018-8874

CVE-2018-8874 affects 2345 Security Guard 3.6. The driver file 2345Wrath.sys is vulnerable to local denial of service (BSOD) due to lack of validation of input values from IOCTL 0x00222054. The vulnerability is described across multiple sources (NVD entry, Red Hat advisory, CNVD, CNVD-like listin...

Buffer overflow

Multiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain privileges via vectors related to reading data from config.dat and Windows Registry...

CVE-2014-1215

Multiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain privileges via vectors related to reading data from config.dat and Windows Registry...

CVE-2014-2885

Multiple integer overflows in TrueCrypt 7.1a allow local users to 1 obtain sensitive information via vectors involving a crafted item-OriginalLength value in the MainThreadProc function in EncryptedIoQueue.c or 2 cause a denial of service memory consumption via vectors involving large...

CVE-2014-5450

Zarafa Collaboration Platform 4.1 uses world-readable permissions for /etc/zarafa/license, which allows local users to obtain sensitive information by reading license files...

CVE-2014-5450

Zarafa Collaboration Platform 4.1 uses world-readable permissions for /etc/zarafa/license, which allows local users to obtain sensitive information by reading license files...

CVE-2017-18240

The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL when the service is...

Arbitrary file deletion

The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL when the service is...

CVE-2017-18240

The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL when the service is...

CVE-2017-18240

The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL when the service is...

CVE-2017-18240

The CVE affects Gentoo’s app-admin/collectd prior to 5.7.2-r1. The root cause is that the PID file directory ownership is set to the collectd account, enabling a local attacker to kill arbitrary processes by modifying the PID directory before a root SIGKILL. Impact is local privilege/denial of se...