Denial of service

An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can send malicious data to the root-listening service, causing the application to terminate and become unavailable...

CVE-2018-4051

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally create directories and subdirectories on the root file system, as well as change the permissions of existing directories...

CVE-2018-4052

An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user...

HP Support Assistant Authorization Issues Vulnerability

HP Support Assistant is a suite of solutions from Hewlett-Packard HP in the United States that provides support and other features for PCs and printers. A security vulnerability exists in HP Support Assistant versions prior to 8.7.50.3. A local attacker could exploit the vulnerability to execute...

Pixar Renderman Input Validation Vulnerability (CNVD-2019-42872)

Pixar Renderman is a rendering application used in animation and movie production. An input validation vulnerability exists in the Installation Assistant tool in version 22.2.0 of Pixar Renderman for Mac OS X-based platforms. A local attacker can exploit the vulnerability to elevate privileges to...

IBM SDK, Java Technology Edition Information Disclosure Vulnerability

IBM SDK, Java Technology Edition is a software development kit for Java application development from IBM, USA. A security vulnerability exists in version 8 of the IBM SDK, Java Technology Edition for AIX-based platforms. A local attacker can exploit the vulnerability to inject code and elevate...

Apache Spark Local Mobilization Vulnerability

Apache Spark is a data processing engine that supports acyclic data streaming and in-memory computation. A local elevated privilege vulnerability exists in Apache Spark. An attacker can exploit this vulnerability to gain elevated privileges...

McAfee True Key Microsoft Windows Client Local Information Disclosure Vulnerability

McAfee True Key TK is an authentication application from the American company McAfee. The program supports features such as facial information recognition and fingerprint recognition. A security vulnerability exists in the Microsoft Windows client in McAfee TK 3.1.9211.0 and earlier versions. A...

Linux kernel local privilege escalation vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the program's lack of an 'accessok' check. The vulnerability can be exploited by an attacker to...

ASUS Aura Sync Arbitrary Code Execution Vulnerability

ASUS Aura Sync is a suite of lighting management software from ASUS. An arbitrary code execution vulnerability exists in ASUS Aura Sync version 1.07.22. A local attacker can exploit this vulnerability to execute arbitrary ring-0 code...

Privilege escalation

vRealize Operations 7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6.1.11286876 contains a local privilege escalation vulnerability due to improper permissions of support scripts. Admin user of the vROps application with shell access may exploit this issue to elevate th...

CVE-2018-18860

A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-permissive configuration settings and a SUID binary, an attacker is able to execute arbitrary binaries as root...

CVE-2018-2489

Locally, without any permission, an arbitrary android application could delete the SSO configuration of SAP Fiori Client. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version...

Microsoft Windows Kernel 'Win32k.sys' CVE-2018-8565 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Versi...

Linux Kernel Local Security Bypass Vulnerability (CNVD-2019-06575)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. There are security vulnerabilities in the Linux kernel. An attacker could exploit the vulnerability to bypass certain security restrictions and perform unauthorized...

Microsoft Windows Kernel Local Information Disclosure Vulnerability (CNVD-2019-01570)

Microsoft Windows Server 2016 and others are a series of operating systems released by Microsoft Corporation USA.Windows Kernel is one of the Windows system kernels. An information disclosure vulnerability exists in Microsoft Windows Kernel, which stems from a program's failure to properly handle...

Cisco Firepower System Software Command Execution Vulnerability

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. A privilege-granting and access-control vulnerability exists in the Sourcefire tunnel control channel protocol in Cisco Firepower System Software running on Cisco Firepower Threat Defense FTD sensors, which ste...

Opsview Monitor Local Elevation of Privilege Vulnerability

Opsview Monitor is a virtual appliance designed to be deployed in an organization's network infrastructure. It is bundled with a Web management console for monitoring and managing hosts and their services. Opsview Monitor suffers from a local elevation of privilege vulnerability that allows an...

UBUNTU-CVE-2018-15858

Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp/keycodes.c in xkbcommon before 0.8.1 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file...

Microsoft Windows Kernel Local Elevation of Privilege Vulnerability (CNVD-2018-16837)

Microsoft Windows 10 and others are products of Microsoft Corporation USA.Microsoft Windows 10 is an operating system for personal computers; Windows Server 2016 is a server operating system. A local elevation of privilege vulnerability exists in Microsoft Windows. An attacker could exploit this...