Microsoft Skype DLL Load Local Code Execution Vulnerability

Microsoft Skype is a suite of instant messaging software from the American company Microsoft. Microsoft Skype suffers from a DLL loading local code execution vulnerability that originates from the program failing to validate user-supplied input. A local attacker could exploit this vulnerability t...

Microsoft Windows DrawIconEx Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the code in the...

Mozilla Firefox File Loading Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Thunderbird is a mail tool adapted from the mail widget of the Mozilla browser. Mozilla Firefox suffers from a file loading vulnerability where a non-existent chrome.manifest file will attempt to be load...

Android Qualcomm networking driver elevation of privilege vulnerability

Android on Nexus 5X is an open source Linux-based operating system for Nexus 5X and other smart devices developed by Google and the Open Handheld Alliance OHA.Qualcomm networking Driver is one of the networking libraries and drivers. The Qualcomm networking driver is one of the network connectivi...

USN-3224-1 lxc vulnerability

Jann Horn discovered that LXC incorrectly verified permissions when creating virtual network interfaces. A local attacker could possibly use this issue to create virtual network interfaces in network namespaces that they do not own...

Android Qualcomm video driver information disclosure vulnerability (CNVD-2017-02819)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium.Qualcomm Video Driver is a graphics card driver. An information disclosure vulnerability exists in the Qualcomm video driver for Android. An attacker could exploit this vulnerability to...

The vulnerability of the iOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SpringBoard component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker, operating locally, to compromise the confidentiality, integrity, and accessibility of protected information through...

Apple macOS Sierra libxpc Component Sandbox Bypass Vulnerability

Apple macOS Sierra is a set of specialized operating systems developed by Apple Inc. in the United States for Mac computers. A security vulnerability in the libxpc component of Apple macOS Sierra allows local attackers to exploit the vulnerability to break out of the sandbox...

Apple iOS Kernel Buffer Error Vulnerability

Apple iOS is an operating system developed for mobile devices. A buffer overflow vulnerability exists in the Kernel component of Apple iOS, which can be exploited by a local attacker to execute arbitrary code with kernel privileges...

CVE-2016-8566

An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database...

VMware Workstation Invalid DACL Privilege Escalation Vulnerability - Windows

VMware Workstation is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Player Invalid DACL Privilege Escalation Vulnerability - Windows

VMware Player is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:player";...

VMware Workstation Insecure 'tpfc.dll' Code Execution Vulnerability - Windows

VMware Workstation is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:workstation...

PDFMate PDF Converter Pro 1.7.5.0 - Buffer Overflow

Document Title: =============== PDFMate PDF Converter Pro 1.7.5.0 - Buffer Overflow References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2029 Release Date: ============= 2017-01-30 Vulnerability Laboratory ID VL-ID: ==================================== 2029...

SUSE-SU-2017:0302-1 Security update for bash

This update for bash fixes the following issues: - CVE-2016-7543: Local attackers could have executed arbitrary commands via specially crafted SHELLOPTS+PS4 variables. bsc1001299 - CVE-2016-0634: Malicious hostnames could have allowed arbitrary command execution when $HOSTNAME was expanded in the...

openssl: Non-constant time codepath followed for certain operations in DSA implementation

It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm DSA signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system...

DEBIAN-CVE-2016-4484

The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password...

CVE-2016-10156

A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229...

CVE-2016-10156

A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229...

CVE-2016-10156

The CVE-2016-10156 issue affects systemd v228, where a flaw in /src/basic/fs-util.c caused world-writable SUID files to be created via systemd timers. This could allow a local attacker to escalate privileges to root. The vulnerability is fixed in systemd v229, and multiple advisories (SUSE/SLES o...