Ubuntu 14.04 LTS : Linux kernel (Vivid HWE) vulnerabilities (USN-2910-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2910-1 advisory. halfdog discovered that OverlayFS, when mounting on top of a FUSE mount, incorrectly propagated file attributes, including setuid. A local unprivileged...

Joyent SmartOS dtrace Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose information on vulnerable installations of Joyent SmartOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the dtrace...

Microsoft Windows Remote Desktop Elevation of Privilege Vulnerability (3134700)

This host is missing an important security update according to Microsoft Bulletin MS16-017. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Apple iOS Application Update Loop Pass Code Bypass

Document Title: =============== Apple iOS v9.1, 9.2 & 9.2.1 - Application Update Loop Pass Code Bypass References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1710 Apple Follow-up ID: 631627909 Video: http://www.vulnerability-lab.com/getcontent.php?id=1711...

Apple iOS v9.x - Application Update Loop Pass Code Bypass

Document Title: =============== Apple iOS v9.x - Application Update Loop Pass Code Bypass References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1710 Apple Follow-up ID: 631627909 Video: http://www.vulnerability-lab.com/getcontent.php?id=1711 Vulnerability...

Apple iOS v9.x - Application Update Loop Pass Code Bypass

Document Title: =============== Apple iOS v9.x - Application Update Loop Pass Code Bypass References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1710 Apple Follow-up ID: 631627909 Video: http://www.vulnerability-lab.com/getcontent.php?id=1711 Vulnerability...

openSUSE Security Update : the Linux Kernel (openSUSE-2016-124)

The openSUSE 13.1 kernel was updated to receive various security and bugfixes. Following security bugs were fixed : - CVE-2016-0728: A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962075. - CVE-2015-7550: A local user could have...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:0205-1)

The SUSE Linux Enterprise 12 kernel was updated to receive a security fix. Following security bug was fixed : - A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962075, CVE-2016-0728. Note that Tenable Network Security has extract...

Apple OS X OSA Script Library Override Vulnerability

Apple OS X is an operating system from Apple. Apple OS X suffers from an OSA script library override vulnerability that allows local attackers to bypass security restrictions and conduct attacks...

Apple iOS IOKit Handling Arbitrary Code Execution Vulnerability

Apple iOS is Apple's operating system for several smart devices. A memory corruption vulnerability exists in Apple iOS IOKit handling, which allows local attackers to execute arbitrary code...

Apple OS X IOAcceleratorFamily Handles Arbitrary Code Execution Vulnerability

Apple OS X is an operating system from Apple. A memory corruption vulnerability exists in Apple OS X IOAcceleratorFamily processing, which allows local attackers to execute arbitrary code...

Unspecified Vulnerability in Oracle VM VirtualBox Windows Installer Component

Oracle VM VirtualBox is an open source virtual machine software from Oracle. An unspecified vulnerability in the Windows Installer component of Oracle VM VirtualBox allows local attackers to exploit the vulnerability to elevate privileges and cause unauthorized disclosure of information...

Unspecified Vulnerability in Solaris Kernel Zones Component (CNVD-2016-00521)

Solaris is a unix-based operating system. An unspecified vulnerability exists in the Solaris Kernel Zones component, which allows local attackers to exploit the vulnerability to gain unauthorized access to data, launch denial-of-service attacks, and more...

Apple iOS Kernel Memory Handling Arbitrary Code Execution Vulnerability

Apple iOS is Apple's operating system for several smart devices. A memory corruption vulnerability exists in the Apple iOS kernel processing, allowing a local attacker to execute arbitrary code...

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Enterprise Manager Base Platform Agent Next Gen Component (CNVD-2016-00696)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified vulnerability in the Enterprise Manager Base Platform Agent Next Gen component of Oracle Enterprise Manager Grid Control allows local attackers to exploit the vulnerability to access data...

Solaris Verified Boot Component Denial of Service Vulnerability

Solaris is a unix-based operating system. A denial of service vulnerability exists in the Solaris Verified Boot component, which allows local attackers to exploit the vulnerability to launch denial of service attacks...

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Enterprise Manager Base Platform Agent Next Gen Component (CNVD-2016-00700)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified vulnerability in the Enterprise Manager Base Platform Agent Next Gen component of Oracle Enterprise Manager Grid Control allows local attackers to exploit the vulnerability to access data...

SUSE: Security Advisory for kernel (SUSE-SU-2016:0205-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle VirtualBox Unspecified Vulnerability (Jan 2016) - Mac OS X

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Oracle VirtualBox Unspecified Vulnerability (Jan 2016) - Linux

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...