Privilege escalation

An elevation of privilege vulnerability in the Account Manager Service in Android 7.0 before 2016-11-01 could enable a local malicious application to retrieve sensitive information without user interaction. This issue is rated as Moderate because it is a local bypass of user interaction...

IBM Tivoli Storage Manager Local Information Disclosure Vulnerability (CNVD-2016-11140)

IBM Tivoli Storage Manager is an ANSI SAN-compliant, scalable solution for discovering, monitoring, and managing enterprise SAN architecture components, as well as allocating and automating the manipulation of an enterprise's attached disk storage resources. A local information disclosure...

Microsoft Windows Virtual Secure Mode Local Information Leakage Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local information leakage vulnerability exists in Microsoft Windows Virtual Secure Mode. An attacker could exploit the vulnerability to obtain sensitive information...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-10981)

Microsoft Windows is the popular computer operating system. An elevation of privilege vulnerability exists in the implementation of the Windows Common Log File System CLFS driver that does not properly handle memory objects. Successful exploitation could allow an attacker to run processes with...

In-depth interpretation of the dirty cow Linux local to mention the right Vulnerability, CVE-2 0 1 6-5 1 9 5-the vulnerability warning-the black bar safety net

0x00 overview The vulnerability is Linux a local mention the right vulnerability, the Finder is Phil Oester, affecting=2.6.22 all the Linux kernel version, the repair time is 2 0 1 6 years 1 0 months 1 8 Number. The vulnerability of the reason is getuserpage the kernel function in the processing ...

Micro Focus Rumba Local Denial of Service Vulnerability

Micro Focus Rumba FTP is an easy-to-use graphical FTP client file transfer tool from Micro Focus UK. A local denial of service vulnerability exists in Micro Focus Rumba version 9.4, which can be exploited by an attacker to cause a denial of service program crash...

Nginx Elevation of Privilege Vulnerability

Nginx is an HTTP and reverse proxy server that can also be used as a mail proxy server. A local lift vulnerability exists in nginx on multiple operating systems. Because the program assigns weak permissions to log files, local and remote attackers can exploit this vulnerability to gain root...

Red Hat Storage Console Local Information Disclosure Vulnerability

Red Hat Storage server is a storage server for the Gluster cluster file system. A local information disclosure vulnerability exists in Red Hat Storage Console, which can be exploited by an attacker to obtain sensitive information...

CVE-2016-5608

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors related to Core, a different vulnerability than CVE-2016-5613...

CVE-2016-5581

Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows local users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2016-5539

Unspecified vulnerability in the Oracle Retail Xstore Payment component in Oracle Retail Applications 1.x allows local users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2016-5501

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core, a different vulnerability than CVE-2016-5538...

CVE-2016-5497

Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2016-5487

Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors...

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox Component

Oracle Virtualization Oracle VirtualBox is a virtual machine component of Oracle's virtualization solution. A local security vulnerability exists in the Core subcomponent of the Oracle VM VirtualBox component of Oracle Virtualization, versions prior to 5.0.28 and versions prior to 5.1.8. An...

Unspecified Vulnerability in Oracle Database Server OJVM Component (CNVD-2016-09796)

Oracle Database Server is the United States Oracle Oracle company's set of relational database management system. OJVM Oracle Java Virtual Machine is one of the execution of Java byte code virtual machine components. A local security vulnerability exists in the OJVM component of Oracle Database...

Unspecified Vulnerability in Oracle Solaris Cluster Component (CNVD-2016-09783)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A local security vulnerability exists in the Kernel/X86 subcomponent of the Solaris component of the Oracle Sun Systems Products Suite, versions 10 and...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris Cluster Component (CNVD-2016-09693)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Solaris Cluster is one of the enterprise cluster components for the Oracle Sun Solaris operating system. A local security vulnerability exists in the Cluster Geo subcomponent of the Solaris Cluster...

Unspecified Vulnerability in Oracle Database Server Kernel PDB Component (CNVD-2016-09687)

Oracle Database Server is the United States Oracle Oracle company's set of relational database management system. Kernel PDB is one of the kernel program database file components. A local security vulnerability exists in the Kernel PDB component of Oracle Database Server version 12.1.0.2. An...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Oracle Solaris Component

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A local security vulnerability exists in the Bash subcomponent of the Oracle Solaris component version 10 of the Oracle Sun Systems Products Suite. An...