SUSE SLES11 Security Update : kernel (SUSE-SU-2016:1203-1)

The SUSE Linux Enterprise 11 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2013-7446: Use-after-free vulnerability in net/unix/afunix.c in the Linux kernel allowed local users to bypass intended AFUNIX socket permissions or cause a...

GLSA-201604-05 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201604-05 Wireshark: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could cause Denial of Service and...

Oracle VirtualBox Unspecified Vulnerability-02 (Apr 2016) - Mac OS X

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Oracle VirtualBox Unspecified Vulnerability-01 (Apr 2016) - Windows

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Oracle VirtualBox Unspecified Vulnerability-02 (Apr 2016) - Linux

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Oracle VirtualBox Unspecified Vulnerability-01 (Apr 2016) - Linux

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Unspecified Vulnerability in Oracle Sun Solaris Kernel Subcomponent

Oracle Sun Solaris is a commercial operating system. A security vulnerability in the Kernel subcomponent of Oracle Sun Solaris allows local attackers to exploit the vulnerability to affect system availability...

Unspecified Vulnerability in Oracle Sun Solaris Filesystem Subcomponent (CNVD-2016-02553)

Oracle Sun Solaris is a commercial operating system. A security vulnerability in the Filesystem subcomponent of Oracle Sun Solaris allows local attackers to exploit the vulnerability to affect system availability...

Oracle MySQL Server:DML subcomponent has unspecified vulnerabilities (CNVD-2016-02532)

Oracle MySQL is an open source relational database management system. A security vulnerability exists in the Server:DML subcomponent of Oracle MySQL, which allows local attackers to exploit the vulnerability to affect system availability...

Qemu Information Disclosure Vulnerability (CNVD-2016-02391)

QEMU is a suite of analog processor software. A vulnerability in Qemu's kvmvapic.c when using Task Priority Register TPR optimization allows a local attacker to exploit the vulnerability to obtain host-sensitive information...

The vulnerability of microprogrammed software in HP networking switches allows attackers to circumvent existing access restrictions.

The vulnerability of microprogrammed software in HP Networking switches is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder operating locally to circumvent existing access restrictions...

Red Hat libvirt Directory Traversal Vulnerability

Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. It supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A directory traversal vulnerability exists in the...

Microsoft Windows Secondary Logon CVE-2016-0135 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with admin privileges in the context of the affected system. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 fo...

The vulnerability of the Mac OS X operating system, which allows a hacker to bypass the security measures

The vulnerability of the dyld component in the Mac OS X operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker acting locally to bypass security measures by using a modified application...

Apple OS X IOUSBInterfaceUserClient Out-Of-Bounds Indexing Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

FreeBSD Kernel amd64_set_ldt Heap Overflow

1. Advisory Information Title: FreeBSD Kernel amd64setldt Heap Overflow Advisory ID: CORE-2016-0005 Advisory URL: Date published: 2016-03-16 Date of last update: 2016-03-14 Vendors contacted: FreeBSD Release mode: Coordinated release 2. Vulnerability Information Class: Unsigned to Signed...

SUSE-SU-2016:0747-1 Security update for kernel live patch 9

This kernel live patch for Linux Kernel 3.12.51-52.31.1 fixes two security issues: Fixes: - CVE-2016-0728: A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962078. - CVE-2013-7446: Use-after-free vulnerability in net/unix/afunix.c...

SUSE-SU-2016:0753-1 Security update for kernel live patch 6

This kernel live patch for Linux Kernel 3.12.44-52.10.1 fixes two security issues: Fixes: - CVE-2016-0728: A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962078. - CVE-2013-7446: Use-after-free vulnerability in net/unix/afunix.c...

IBM Informix Dynamic Server Arbitrary Code Execution Vulnerability

IBM Informix Dynamic Server is a scalable object-relational database server that provides clustered data centers with capabilities such as continuous data availability and disaster recovery. A security vulnerability in IBM IDS for Windows-based platforms allows local attackers to exploit the...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel driver exists due to an error in the handling of memory objects by the Win32k.sys driver. Exploiting this vulnerability allows a local attacker to increase their privileges through a specially created application...