UBUNTU-CVE-2016-2858

QEMU, when built with the Pseudo Random Number Generator PRNG back-end support, allows local guest OS users to cause a denial of service process crash via an entropy request, which triggers arbitrary stack based allocation and memory corruption...

GLSA-201604-01 : QEMU: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201604-01 QEMU: Multiple vulnerabilities Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details. Impact : Local users within a guest QEMU environment can execute...

QEMU: Multiple vulnerabilities

Background QEMU is a generic and open source machine emulator and virtualizer. Description Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details. Impact Local users within a guest QEMU environment can execute arbitrary code within th...

mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option...

mysql: unspecified vulnerability related to Client programs (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client programs...

CVE-2016-2288

Cogent DataHub before 7.3.10 allows local users to gain privileges by leveraging the user or guest role to modify a file...

CVE-2016-2288

Cogent DataHub before 7.3.10 allows local users to gain privileges by leveraging the user or guest role to modify a file...

CVE-2016-2288

CVE-2016-2288 affects Cogent DataHub versions up to 7.3.9 (and earlier). The vulnerability arises from improper privilege management, allowing a local user/guest to elevate privileges by modifying an accessible file. The advisory/ATA cites that Cogent fixed this in 7.3.10; upgrading to 7.3.10 (or...

Design/Logic Flaw

The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the 1 nsrd, 2 nsrexecd, and 3 portmap executable files, which allows local users to gain privileges via a Trojan horse file...

CVE-2016-1745

IOFireWireFamily in Apple OS X before 10.11.4 allows local users to cause a denial of service NULL pointer dereference via unspecified vectors...

CVE-2016-1732

AppleRAID in Apple OS X before 10.11.4 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2016-1773

CVE-2016-1773 affects Apple OS X before 10.11.4, where the code-signing subsystem fails to properly verify file ownership. This enables local attackers to determine the existence of arbitrary files via unspecified vectors (information disclosure). The issue is documented in multiple sources and p...

IBM Informix nsrexecd Service Privilege Escalation Vulnerability

This vulnerability allows local users to execute arbitrary code on vulnerable installations of IBM Informix. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within configuration of the...

IBM Informix portmap Service Privilege Escalation Vulnerability

This vulnerability allows local users to execute arbitrary code on vulnerable installations of IBM Informix. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within configuration of the...

IBM Informix nsrd Service Privilege Escalation Vulnerability

This vulnerability allows local users to execute arbitrary code on vulnerable installations of IBM Informix. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within configuration of the nsr...

CVE-2016-2281

Untrusted search path vulnerability in ABB Panel Builder 800 5.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in ABB Panel Builder 800 5.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2016-2281

Untrusted search path vulnerability in ABB Panel Builder 800 5.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2016-2281

ABB Panel Builder 800 version 5.1 is affected by CVE-2016-2281 due to an Uncontrolled Search Path Element (DLL hijacking). If a malicious DLL is placed in the working directory, an attacker could execute arbitrary code with local privileges. The ICS-CERT/NCCIC advisories confirm the impact as pot...

CVE-2016-3155

Summary: CVE-2016-3155 affects Siemens APOGEE Insight, where the application folder has weak default permissions. This could let an authenticated local user view or modify APOGEE Insight data via unspecified vectors. The vulnerability is not remote-exploitable; exploitation requires OS-level acce...