Linux kernel local denial of service vulnerability (CNVD-2017-33099)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the 'imonprobe' function in the drivers/media/rc/imon.c file in Linux kernel 4.13.11 and earlier versions. A local attacker can...

Linux kernel KEYS subsystem local denial of service vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the U.S. KEYS is one of the subsystems that returns all keys that match a pattern. A security vulnerability exists in the KEYS subsystem in versions of Linux kernel prior to 4.13.10. A local...

Linux kernel local lift vulnerability (CNVD-2017-34132)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local boost vulnerability exists in the Linux kernel. A local attacker can exploit this vulnerability to gain root privileges...

Oracle WebCenter Sites Local Vulnerability (Oct 2017 CPU)

The version of Oracle WebCenter Sites running on the remote host is affected by an unspecified flaw in the Sites component formerly FatWire Content Server that allows an authenticated, local attacker to impact confidentiality and integrity. Note that this issue only applies to versions 11.1.1.8.0...

Linux Kernel < 3.16.39 (Debian 8 x64) - 'inotfiy' Local Privilege Escalation

/ CVE-2017-7533 inotfiy linux kernel vulnerability. $ gcc -o exploit exploit.c -lpthread $./exploit Listening for events. Listening for events. alloclen : 50 longname="testdir/bbbb32103210321032100��1����" handleevents event-name : b, event-len : 16 Detected overwrite!!! callrename done. alloclen...

Microsoft Windows Device Guard Local Security Bypass Vulnerability (CNVD-2017-30911)

Microsoft Windows is the popular computer operating system. A security bypass vulnerability in the implementation of Microsoft Windows Device Guard could allow an attacker to inject malicious code into a Windows PowerShell session...

Microsoft Windows Graphics Component Local Information Disclosure Vulnerability (CNVD-2017-30910)

Microsoft Windows is the popular computer operating system. An information disclosure vulnerability exists in the implementation of Windows Graphics when it does not properly handle memory objects, which can be successfully exploited to allow an attacker to obtain sensitive information...

Red Hat JBoss Enterprise Application Platform Information Disclosure Vulnerability (CNVD-2017-34869)

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source, J2EE-based middleware platform. The platform is mainly used to build, deploy and host Java applications and services. A local information disclosure vulnerability exists in Red Hat...

NVIDIA GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-30724)

NVIDIA GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA. kernel mode layer handler is one of the kernel mode layer handler. A security vulnerability exists in the kernel mode layer handler in the NVIDIA GPU Display Driver. An attacker could exploit this vulnerabilit...

Microsoft Windows Kernel CVE-2017-8709 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Versi...

IBM Spectrum Protect Information Disclosure Vulnerability

IBM Spectrum Protect formerly known as Tivoli Storage Manager is a suite of data protection platforms from U.S.-based IBM that provides organizations with a single point of control and management, and support for backup and recovery of virtual, physical and cloud environments of all sizes. A...

Unspecified vulnerability in mktexlsr

mktexlsr is a library for generating catalogs. A security vulnerability exists in mktexlsr revision 36855 and versions prior to revision 36626. A local attacker can exploit this vulnerability to overwrite arbitrary files via a symbolic link attack...

Haxx Curl Information Disclosure Vulnerability (CNVD-2017-28786)

Haxx Curl is a set of file transfer tools from the Swedish company Haxx that work on the command line using URL syntax. The tools support file uploads and downloads and include a libcurl client-side URL transfer library for program development. A local information disclosure vulnerability exists ...

Microsoft Windows Subsystem for Linux Local Denial of Service Vulnerability

Microsoft Windows is the popular operating system. A security vulnerability in the Microsoft Windows Subsystem for Linux handling of memory objects allows an attacker to exploit the vulnerability to submit a special request, which can be used in a denial-of-service attack...

VMware vCenter Server Local Information Disclosure Vulnerability

VMware vCenter Server is a suite of server and virtualization management software from VMware. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructures. A local information disclosure vulnerability...

Oracle FLEXCUBE Private Banking Local Vulnerability

Oracle Financial Services Applications is a set of core banking, online banking and property management financial services software from Oracle Corporation, of which Oracle FLEXCUBE Private Banking is a private banking component. A security vulnerability exists in the Miscellaneous subcomponent o...

Microsoft Windows Kernel 'Win32k.sys' Local Information Disclosure Vulnerability (CNVD-2017-16002)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local information disclosure vulnerability exists in Microsoft Windows, which stems from Win32k's failure to properly handle objects in memory. A local attacker could exploit this vulnerability to...

Microsoft Windows Kernel Local Elevation of Privilege Vulnerability (CNVD-2017-22654)

Microsoft Windows is the popular computer operating system. A security vulnerability in the Microsoft Windows kernel's handling of memory objects allows an attacker to exploit the vulnerability to submit special requests and elevate privileges...

PCRE 'pcre_exec.c' Local Denial of Service Vulnerability

PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. PCRE suffers from a local denial of service vulnerability. An attacker could exploit this issue to cause stack exhaustion, resulting in a...

IBM Integration Bus and WebSphere Message Broker Denial of Service Vulnerability

IBM Integration Bus formerly known as IBM WebSphere Message Broker is an enterprise service bus ESB product from IBM. The product provides connectivity and common data transformations for Service Oriented Architecture SOA environments and non-SOA environments. A denial of service vulnerability...