126 matches found
CVE-2020-10720
A flaw was found in the Linux kernel's implementation of GRO in versions before 5.2. This flaw allows an attacker with local access to crash the system...
Privilege escalation
Uncontrolled search path in IntelR Graphics Drivers before version 26.20.100.7158 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2019-11139
Improper conditions check in the voltage modulation interface for some IntelR XeonR Scalable Processors may allow a privileged user to potentially enable denial of service via local access...
CVE-2019-4309
IBM Security Guardium Big Data Intelligence SonarG 4.0 uses hard coded credentials which could allow a local user to obtain highly sensitive information. IBM X-Force ID: 161035...
Supply-Chain Attack against the Electron Development Platform
Electron is a cross-platform development system for many popular communications apps, including Skype, Slack, and WhatsApp. Security vulnerabilities in the update system allows someone to silently inject malicious code into applications. From a news article: At the BSides LV security conference o...
CVE-2019-11879
The WEBrick gem 1.4.2 for Ruby allows directory traversal if the attacker once had local access to create a symlink to a location outside of the web root directory. NOTE: The vendor states that this is analogous to Options FollowSymlinks in the Apache HTTP Server, and therefore it is "not a probl...
DEBIAN-CVE-2019-11190
The Linux kernel before 4.8 allows local users to bypass ASLR on setuid programs such as /bin/su because installexeccreds is called too late in loadelfbinary in fs/binfmtelf.c, and thus the ptracemayaccess check has a race condition when reading /proc/pid/stat...
CVE-2018-5927
HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code...
CVE-2018-5927
CVE-2018-5927 affects HP Support Assistant prior to version 8.7.50.3. The HP advisory (C06242762) documents an arbitrary code execution risk via a DLL loading vulnerability exploitable by a local attacker with access to the host; the impact is local code execution with high impact on confidential...
Privilege escalation
An exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software improperly validates inputs. An attacker with local access could use this vulnerability to modify the file system as root. An attacker would need local access to the machine for a successful exploit...
Security Bulletin: IBM Security Key Lifecycle Manager is affected by exposure of sensitive information to be cached by browser (CVE-2016-6097)
Summary IBM Security Key Lifecycle Manager allows web pages containing sensitive information to be cached by a browser. As a result this information will be stored unsafely for an indefinite amount of time on the user's hard drive. Attackers with local access or malware installed on the user's...
IBM DB2 for Linux, UNIX and Windows File Overwrite Vulnerability (CNVD-2018-10562)
IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBM i, z/OS, and Windows server versions. A security vulnerability exists in IBM DB2 including DB2 Connect Server for Linux, UNIX, and...
Advanced SystemCare Ultimate Denial of Service Vulnerability
Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware, etc. A security vulnerability exists in the Monitorx86.sys driver file in Advanced SystemCare Ultimate version 11.0.1.58, which originates...
CVE-2017-17803
In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file VIRAGTLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x82736068, a different vulnerability than CVE-2017-17475...
Multiple Cisco Products Cisco NX-OS System Software Unauthorized Access Vulnerability
Cisco MDS Multilayer Director Switches, Cisco Nexus 7000 Series Switches, and Cisco Nexus 7700 Series Switches are all Cisco switches.NX-OS System The NX-OS System Software is the operating system used in these switches. An unauthorized access vulnerability exists in Cisco NX-OS System Software...
PT-2015-6825 · Red Hat +1 · Abrt +2
Name of the Vulnerable Software and Affected Versions: ABRT versions prior to 2.7.1 Description: The issue allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp. This is related to the...
Siemens SIMATIC WinCC Sm@rtClient for Android Password Information Disclosure Vulnerability
Siemens SIMATIC WinCC Sm@rtClient for Android is a client program on Android systems.Siemens SIMATIC is an automation software with a single engineering environment. A security vulnerability exists in the Siemens SIMATIC WinCC Sm@rtClient for Android storage that allows local users to access...
PT-2014-5280 · Cisco · Cisco Asa
Name of the Vulnerable Software and Affected Versions: Cisco ASA Software versions 8.7 before 8.71.14 Cisco ASA Software versions 9.2 before 9.22.8 Cisco ASA Software versions 9.3 before 9.31.1 Description: The issue allows local users to obtain Linux root access by leveraging administrative...
MS Windows 2000/NT 4/XP Window Message Subsystem Design Error Vulnerability (4)
No description provided by source. source: http://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based...
Altair Engineering PBS Pro 10.x - 'pbs_mom' Insecure Temporary File Creation
source: https://www.securityfocus.com/bid/41449/info Altair Engineering PBS Pro creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected applicatio...