CVE-2018-7098

A security vulnerability was identified in 3PAR Service Processor SP prior to SP-4.4.0.GA-110MU7. The vulnerability may be locally exploited to allow directory traversal...

CVE-2018-7073

A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24...

CVE-2018-7073

A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24...

Design/Logic Flaw

A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24...

Security update for util-linux (moderate)

This update for util-linux fixes the following security issue: - CVE-2018-7738: Fix local vulnerability using embedded shell commands in a mountpoint name bsc1084300 This update was imported from the SUSE:SLE-15:Update update project...

SUSE-SU-2018:2066-1 Security update for util-linux

This update for util-linux fixes the following security issue: - CVE-2018-7738: Fix local vulnerability using embedded shell commands in a mountpoint name bsc1084300...

UBUNTU-CVE-2018-3055

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

Prime95 Local Buffer Overflow Vulnerability

Prime95 is a dedicated test system stabilization software for the GIMPS organization. A local buffer overflow vulnerability exists in Prime95 version 29.4b8, which can be exploited by an attacker to take up too much memory and cause the original code to fail...

Security Bulletin: TSM Client GUI local hang (CVE-2014-0876)

Summary An IBM Tivoli Storage Manager TSM client local vulnerability can cause the crash or hang of certain Java GUI functions. Vulnerability Details CVE ID: CVE-2014-0876 Description: A local buffer overrun in the IBM Tivoli Storage Manager TSM Windows and Macintosh backup-archive client Java GU...

Microsoft Windows Kernel Local Information Disclosure Vulnerability (CNVD-2018-13283)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the United States.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems.Windows kernel is one of the Windows kernel...

Microsoft Windows Device Guard Local Security Bypass Vulnerability (CNVD-2018-12571)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows 10 is a suite of operating systems for personal computers.Windows Server 2016 is a suite of server operating systems.Device Guard is one of the device Device Guard is...

CVE-2014-5220

The mdcheck script of the mdadm package for openSUSE 13.2 prior to version 3.3.1-5.14.1 does not properly sanitize device names, which allows local attackers to execute arbitrary commands as root...

CVE-2018-1449

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140044...

Privilege escalation

procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of several vulnerabilities in the configfile function...

DESlock + Local Heap Buffer Overflow Vulnerability

DESLock+ client is a client for a suite of enterprise-class data encryption software from DESLock UK. The software supports encryption of hard disks, removable disks, e-mail, documents, etc. The kernel driver DLMFENC.sys is one of the kernel drivers. A buffer overflow vulnerability exists in...

Oracle Solaris Local Vulnerability (CNVD-2018-09103)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A local security vulnerability exists in Oracle Solaris, where the 'Network Services Library' subcomponent is affected. An attacker could exploit the...

CVE-2018-9063

MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...

Design/Logic Flaw

MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...

Oracle Solaris Cluster Local Vulnerability (CNVD-2018-09107)

Oracle Sun Solaris is a computer operating system developed by Sun Microsystems. It is a derivative of the UNIX operating system. The Oracle Solaris Cluster product has a security vulnerability in its implementation that is exploited by attackers to compromise the availability, integrity, and...

CVE-2018-9002

In Advanced SystemCare Ultimate 11.0.1.58, the driver file Monitorwin7x64.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc...