21897 matches found
CVE-2017-14102
MIMEDefang 2.80 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill cat /pathname" command, as...
CVE-2017-14102
MIMEDefang 2.80 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill cat /pathname" command, as...
CVE-2017-14102
MIMEDefang 2.80 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill cat /pathname" command, as...
CVE-2017-14102
CVE-2017-14102 affects MIMEDefang 2.80 and earlier. The vulnerability arises when a non-root process creates a PID file after dropping privileges, which could allow a local attacker with access to the non-root account to modify the PID file and kill an arbitrary process before a root script runs ...
CVE-2017-1441
IBM Emptoris Services Procurement 10.0.0.5 could allow a local user to view sensitive information stored locally due to improper access control. IBM X-Force ID: 128106...
CVE-2017-13774
Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors...
CVE-2017-13774
Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors...
Design/Logic Flaw
Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors...
CVE-2017-13774
Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors...
IBM Sametime Connect Information Disclosure Vulnerability (CNVD-2017-30565)
IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. IBM Sametime Connect is a client for IBM Sametime, a set of next-generation social communication tools from IBM that help users realize real-time business collaboration by integrating audio voice,...
CVE-2016-2978
IBM Sametime 8.5.2 and 9.0 could store potentially sensitive information from the browser cache locally that could be available to a local user. IBM X-Force ID: 113938...
Design/Logic Flaw
Polycom BToE Connector before 3.0.0 uses weak permissions Everyone: Full Control for "Program Files x86\polycom\polycom btoe connector\plcmbtoesrv.exe," which allows local users to gain privileges via a Trojan horse file...
Design/Logic Flaw
Red Hat Satellite 6 allows local users to access mongod and delete pulpdatabase...
Design/Logic Flaw
Untrusted search path vulnerability in ZTE Datacard MF19 0V1.0.0B04 allows local users to gain privilege by modifying the 'Ucell Internet' directory to reference a malicious mmsdllr.dll or mediaplayerdll.dll...
CVE-2014-8168
Red Hat Satellite 6 allows local users to access mongod and delete pulpdatabase...
CVE-2014-8168
Red Hat Satellite 6 allows local users to access mongod and delete pulpdatabase...
Debian DLA-1069-1 : tenshi security update
Tenshi creates a tenshi.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tenshi.pid modification before a root script executes a 'kill cat /pathname/tenshi.pid' command. For Debian...
[SECURITY] [DLA 1069-1] tenshi security update
Package : tenshi Version : 0.13-2+deb7u1 CVE ID : CVE-2017-11746 Debian Bug : 871321 Tenshi creates a tenshi.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tenshi.pid modificatio...