CVE-2017-17468

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service Arbitrary Write via a \.\Viragtlt DeviceIoControl request of 0x82730020, a different vulnerability than CVE-2017-17050...

CVE-2017-17466

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service Arbitrary Write via a \.\Viragtlt DeviceIoControl request of 0x82730088...

Linux Kernel Local Contention Condition Vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A local contention condition vulnerability exists in the 'touchpmd' function of the THP implementation in Linux Kernel versions 2.6.38 through 4.14, which stems from t...

Multiple Local Buffer Overflow Vulnerabilities in Intel Manageability Engine

Intel Manageability Engine Intel Manageability Engine is a thermal management driver from Intel for its desktop series chipsets. Intel Manageability Engine suffers from multiple local buffer overflow vulnerabilities that allow attackers to exploit the vulnerabilities to submit special requests,...

Multiple Local Buffer Overflow Vulnerabilities in Intel Trusted Execution Engine

Intel Trusted Execution Engine Firmware is a trusted execution engine firmware product. Intel Trusted Execution Engine has multiple local buffer overflow vulnerabilities. The vulnerabilities could be exploited by an attacker with local access rights to execute arbitrary code...

Multiple local information disclosure vulnerabilities in Linux kernel 'block/bio.c'

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. Multiple local information disclosure vulnerabilities exist in the 'biomapuseriov and biounmapuser' functions of the block/bio.c file in versions of Linux kernel prior...

Icinga Core Elevation of Privilege Vulnerability

Icinga Core is an enterprise-grade open source monitoring system from the Icinga project. The system can monitor network resources , find network errors and generate performance data reports . An elevation of privilege vulnerability exists in Icinga Core 1.14.0 and earlier versions. A local...

Linux kernel local denial of service vulnerability (CNVD-2017-33484)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the drivers/media/usb/dvb-usb/dib0700devices.c file in Linux kernel 4.13.11 and earlier versions. A local attacker ca...

CVE-2017-16637

In Vectura Perfect Privacy VPN Manager v1.10.10 and v1.10.11, when resetting the network data via the software client, with a running VPN connection, a critical error occurs which leads to a "FrmAdvancedProtection" crash. Although the mechanism malfunctions and an error occurs during the runtime...

Linux kernel local denial of service vulnerability (CNVD-2017-33088)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the 'usbserialconsoledisconnect' function in the drivers/usb/serial/console.c file in versions of Linux kernel prior to 4.13....

Linux kernel local denial of service vulnerability (CNVD-2017-33095)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the 'usbhidparse' function in the drivers/hid/usbhid/hid-core.c file in versions of Linux kernel prior to 4.13.8. A local...

Linux kernel local denial of service vulnerability (CNVD-2017-33090)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the sound/usb/mixer.c file in versions of Linux kernel prior to 4.13.8. A local attacker can exploit this vulnerability to...

Linux kernel local denial of service vulnerability (CNVD-2017-33099)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the 'imonprobe' function in the drivers/media/rc/imon.c file in Linux kernel 4.13.11 and earlier versions. A local attacker can...

Linux kernel local denial of service vulnerability (CNVD-2017-33093)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the drivers/usb/core/config.c file in versions of Linux kernel prior to 4.13.6. A local attacker can exploit this vulnerabili...

Linux kernel local lift vulnerability (CNVD-2017-34132)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local boost vulnerability exists in the Linux kernel. A local attacker can exploit this vulnerability to gain root privileges...

Linux kernel KEYS subsystem local denial of service vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the U.S. KEYS is one of the subsystems that returns all keys that match a pattern. A security vulnerability exists in the KEYS subsystem in versions of Linux kernel prior to 4.13.10. A local...

Oracle WebCenter Sites Local Vulnerability (Oct 2017 CPU)

The version of Oracle WebCenter Sites running on the remote host is affected by an unspecified flaw in the Sites component formerly FatWire Content Server that allows an authenticated, local attacker to impact confidentiality and integrity. Note that this issue only applies to versions 11.1.1.8.0...

Linux Kernel < 3.16.39 (Debian 8 x64) - 'inotfiy' Local Privilege Escalation

/ CVE-2017-7533 inotfiy linux kernel vulnerability. $ gcc -o exploit exploit.c -lpthread $./exploit Listening for events. Listening for events. alloclen : 50 longname="testdir/bbbb32103210321032100��1����" handleevents event-name : b, event-len : 16 Detected overwrite!!! callrename done. alloclen...

Microsoft Windows Device Guard Local Security Bypass Vulnerability (CNVD-2017-30911)

Microsoft Windows is the popular computer operating system. A security bypass vulnerability in the implementation of Microsoft Windows Device Guard could allow an attacker to inject malicious code into a Windows PowerShell session...

Microsoft Windows Graphics Component Local Information Disclosure Vulnerability (CNVD-2017-30910)

Microsoft Windows is the popular computer operating system. An information disclosure vulnerability exists in the implementation of Windows Graphics when it does not properly handle memory objects, which can be successfully exploited to allow an attacker to obtain sensitive information...