CVE-2021-33974

CVE-2021-33974 affects Qihoo 360 products: Safeguard (12.1.0.1004/1005, 13.1.0.1001), Total Security (10.8.0.1060/1213), and Safe Browser & 360 Chrome (version 12). Root cause is a buffer overflow enabling remote arbitrary code execution. Attack vectors include: in the browser, exploitation by si...

CVE-2023-1629

A vulnerability classified as critical was found in JiangMin Antivirus 16.2.2022.418. Affected by this vulnerability is the function 0x222010 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit...

PT-2023-17133 · Jiangmin · Jiangmin Antivirus

Name of the Vulnerable Software and Affected Versions: JiangMin Antivirus version 16.2.2022.418 Description: A problematic issue was found in the library kvcore.sys of the component IOCTL Handler, affecting the function 0x222010. This leads to a null pointer dereference. The issue can be exploite...

PT-2023-17026 · Lespeed Wisecleaner · Wisehdinfo64.Dll +1

Name of the Vulnerable Software and Affected Versions: Lespeed WiseCleaner Wise System Monitor version 1.5.3.54 Description: A critical issue has been found, affecting the function 0x9C402088 in the WiseHDInfo64.dll library of the IoControlCode Handler component. This leads to improper access...

UNISOC Chipsets 缓冲区错误漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in the UNISOC Chipsets wlan module that stems from a lack of parameter checking. This could lead to a local denial of service in the wlan service...

Debian: Security Advisory (DSA-2015-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

K8602: XSS vulnerability viewing logs from the web management interface

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

CVE-2023-24575

Dell Multifunction Printer E525w Driver and Software Suite, versions prior to 1.047.2022, A05, contain a local privilege escalation vulnerability that could be exploited by malicious users to compromise the affected system...

PT-2023-16609 · Filseclab · Filseclab Twister Antivirus

Name of the Vulnerable Software and Affected Versions: Filseclab Twister Antivirus version 8.17 Description: A problematic issue has been found in the IoControlCode Handler component, specifically affecting the function 0x220017 in the ffsmon.sys library. This issue leads to denial of service and...

SUSE CVE-2004-1001

Unknown vulnerability in the passwdcheck function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pamchauthtok function call is not properly handled...

SUSE CVE-2005-0602

Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges...

SUSE CVE-2007-1743

suexec in Apache HTTP Server httpd 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local users to leverage other vulnerabilities to create arbitrary UID/GID owned files if /proc is mounted. NOTE: the researcher, who is reliable, claims that the vend...

SUSE CVE-2007-5718

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the 1 /tmp/vobcopy.bla or 2 /tmp/vobcopy0.5.14.log temporary file...

SUSE CVE-2012-0494

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows local users to affect availability via unknown vectors...

SUSE CVE-2012-3160

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows local users to affect confidentiality via unknown vectors related to Server Installation...

SUSE CVE-2012-3199

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Gnome Trusted Extension...

SUSE CVE-2012-3208

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability, related to Kernel/RCTL...

SUSE CVE-2013-2391

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows local users to affect confidentiality and integrity via unknown vectors related to Server Install...

SUSE CVE-2014-2486

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2477...

SUSE CVE-2014-2487

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.14, when running on Windows, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a differen...