Red Hat JBoss Enterprise Application Platform Information Disclosure Vulnerability (CNVD-2017-34869)

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source, J2EE-based middleware platform. The platform is mainly used to build, deploy and host Java applications and services. A local information disclosure vulnerability exists in Red Hat...

NVIDIA GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-30724)

NVIDIA GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA. kernel mode layer handler is one of the kernel mode layer handler. A security vulnerability exists in the kernel mode layer handler in the NVIDIA GPU Display Driver. An attacker could exploit this vulnerabilit...

Microsoft Windows Kernel CVE-2017-8709 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Versi...

IBM Spectrum Protect Information Disclosure Vulnerability

IBM Spectrum Protect formerly known as Tivoli Storage Manager is a suite of data protection platforms from U.S.-based IBM that provides organizations with a single point of control and management, and support for backup and recovery of virtual, physical and cloud environments of all sizes. A...

Unspecified vulnerability in mktexlsr

mktexlsr is a library for generating catalogs. A security vulnerability exists in mktexlsr revision 36855 and versions prior to revision 36626. A local attacker can exploit this vulnerability to overwrite arbitrary files via a symbolic link attack...

Haxx Curl Information Disclosure Vulnerability (CNVD-2017-28786)

Haxx Curl is a set of file transfer tools from the Swedish company Haxx that work on the command line using URL syntax. The tools support file uploads and downloads and include a libcurl client-side URL transfer library for program development. A local information disclosure vulnerability exists ...

Microsoft Windows Subsystem for Linux Local Denial of Service Vulnerability

Microsoft Windows is the popular operating system. A security vulnerability in the Microsoft Windows Subsystem for Linux handling of memory objects allows an attacker to exploit the vulnerability to submit a special request, which can be used in a denial-of-service attack...

Oracle FLEXCUBE Private Banking Local Vulnerability

Oracle Financial Services Applications is a set of core banking, online banking and property management financial services software from Oracle Corporation, of which Oracle FLEXCUBE Private Banking is a private banking component. A security vulnerability exists in the Miscellaneous subcomponent o...

VMware vCenter Server Local Information Disclosure Vulnerability

VMware vCenter Server is a suite of server and virtualization management software from VMware. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructures. A local information disclosure vulnerability...

Microsoft Windows Kernel 'Win32k.sys' Local Information Disclosure Vulnerability (CNVD-2017-16002)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local information disclosure vulnerability exists in Microsoft Windows, which stems from Win32k's failure to properly handle objects in memory. A local attacker could exploit this vulnerability to...

Microsoft Windows Kernel Local Elevation of Privilege Vulnerability (CNVD-2017-22654)

Microsoft Windows is the popular computer operating system. A security vulnerability in the Microsoft Windows kernel's handling of memory objects allows an attacker to exploit the vulnerability to submit special requests and elevate privileges...

PCRE 'pcre_exec.c' Local Denial of Service Vulnerability

PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. PCRE suffers from a local denial of service vulnerability. An attacker could exploit this issue to cause stack exhaustion, resulting in a...

Razer Synapse rzpnk.sys ZwOpenProcess

A vulnerability exists in the latest version of Razer Synapse v2.20.15.1104 as of the day of disclosure which can be leveraged locally by a malicious application to elevate its privileges to those of NTAUTHORITY\SYSTEM. The vulnerability lies in a specific IOCTL handler in the rzpnk.sys driver th...

IBM Integration Bus and WebSphere Message Broker Denial of Service Vulnerability

IBM Integration Bus formerly known as IBM WebSphere Message Broker is an enterprise service bus ESB product from IBM. The product provides connectivity and common data transformations for Service Oriented Architecture SOA environments and non-SOA environments. A denial of service vulnerability...

Microsoft Skype 'MSFTEDIT.DLL' Buffer Overflow Vulnerability

Skype is an instant messaging program that comes with the features needed for IM, such as video chat, multi-person voice conferencing, multi-person chat, transferring files, text chat, and more. Microsoft Skype suffers from a local buffer overflow vulnerability due to the program failing to perfo...

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2017-12798)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local information disclosure vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to obtain sensitive information...

Microsoft Windows Information Disclosure Vulnerability (CNVD-2017-12060)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local information disclosure vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to obtain sensitive information...

Microsoft Windows Information Disclosure Vulnerability (CNVD-2017-12061)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local information disclosure vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to obtain sensitive information...

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2017-12792)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local information disclosure vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to obtain sensitive information, bypass security restrictions, and perform...

Microsoft Windows Kernel Information Disclosure Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Windows kernel is one of the kernels. A local information disclosure vulnerability exists in Microsoft Windows Kernel. A local attacker could exploit this vulnerability to obtain sensitive information...