IBM InfoSphere Master Data Management - Collaborative Edition Information Disclosure Vulnerability

IBM InfoSphere Master Data Management MDM - Collaborative Edition is a suite of solutions that provide collaborative editing for Product Information Management PIM. A security vulnerability in IBM InfoSphere MDM - Collaborative Edition allows local attackers to exploit the vulnerability to obtain...

Huawei P8 Local Elevation of Privilege Vulnerability (CNVD-2016-00342)

The Huawei P8 is a smartphone from the Chinese company Huawei. Huawei P8 has a security vulnerability that can be exploited by local attackers to elevate privileges...

Xen Denial of Service Vulnerability (CNVD-2016-00238)

Xen is a virtualization technology developed by the University of Cambridge that can be used in the Linux kernel, allowing multiple operating systems to run simultaneously. A denial of service vulnerability exists in Xen 4.6 that allows local attackers to cause a denial of service via a heavily...

McAfee Application Control Kernel Driver Memory Corruption Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of McAfee Application Control. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

USN-2857-1 Linux kernel vulnerability | Cloud Foundry

USN-2857-1 Linux kernel vulnerability High Vendor Linux kernel Versions Affected Ubuntu 14.04 Description Nathan Williams discovered that overlayfs in the Linux kernel incorrectly handled setattr operations. A local unprivileged attacker could use this to create files with administrative permissi...

PT-2016-7989

Name of the Vulnerable Software and Affected Versions Yasr version 0.6.9-5 Description A buffer overflow occurs when a local attacker provides an oversized argument to the -p parameter. This allows the attacker to crash the application or execute arbitrary code by using a crafted payload containi...

PT-2016-7987

Name of the Vulnerable Software and Affected Versions yTree version 1.94-1.1 Description A stack-based buffer overflow allows local attackers to execute arbitrary code by providing an excessively long argument to the application. This is achieved by crafting a malicious command-line argument...

PT-2016-7986

Name of the Vulnerable Software and Affected Versions xwpe versions prior to 1.5.30a-2.1 Description A stack-based buffer overflow allows local attackers to execute arbitrary code or cause a denial of service. This occurs when overly long input strings exceed buffer boundaries. Specifically, an...

Xen Denial of Service Vulnerability (CNVD-2015-08418)

Xen is an open source virtual machine monitor product. Xen has a security vulnerability that allows local attackers to exploit the vulnerability for denial of service...

Linux kernel local information disclosure vulnerability (CNVD-2015-08431)

Linux kernel is an open source operating system. Linux kernel has a security vulnerability that allows local attackers to exploit the vulnerability to obtain sensitive information...

Ubuntu: Security Advisory (USN-2845-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LXCFS Privilege Acquisition Vulnerability (CNVD-2015-07988)

LXCFS is a suite of user-space filesystem software for solving the Linux kernel's constraints. A security vulnerability exists in versions prior to LXCFS 0.12. Due to the program failing to properly execute directory escapes. A local attacker can exploit this vulnerability by querying or updating...

POP Peeper 4.0.1 - Persistent Code Execution Vulnerability

Document Title: =============== POP Peeper 4.0.1 - Persistent Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1657 Release Date: ============= 2015-11-26 Vulnerability Laboratory ID VL-ID: ====================================...

Switch v4.68 - Code Execution Vulnerability

Document Title: =============== Switch v4.68 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1649 Release Date: ============= 2015-11-23 Vulnerability Laboratory ID VL-ID: ==================================== 1649 Common...

Multiple Huawei router information leakage vulnerability

Huawei S7700 is a product of Huawei, China.Huawei S7700, S9700, and S9300 are intelligent routing switches.Huawei AR200, AR1200, AR2200, and AR3200 are multi-service routers for enterprises. An information disclosure vulnerability exists in the CF card of multiple Huawei routers, which allows loc...

SoundTap 2.27 - Code Execution Vulnerability

Document Title: =============== SoundTap 2.27 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1650 Release Date: ============= 2015-11-22 Vulnerability Laboratory ID VL-ID: ==================================== 1650 Common...

IBM Java SDK Local Information Disclosure Vulnerability

IBM Java SDK is a Java implementation platform. A local information disclosure vulnerability exists in IBM Java SDK. Allowing local attackers can exploit the vulnerability to obtain sensitive information...

EMC VPLEX GeoSynchrony Local Information Disclosure Vulnerability

EMC VPLEX is a set of next-generation data storage platforms for moving and accessing information within, across and between data centers; GeoSynchrony is a VPLEX operating system. EMC VPLEX GeoSynchrony is configured by default to store plaintext NAVISPHERE GUI passwords in log files, which can ...

Port Scan v2.0 iOS - Command Inject Vulnerability

Port Scan version 2.0 suffers from a command injection vulnerability. Document Title: =============== Port Scan v2.0 iOS - Command Inject Vulnerability Product & Service Introduction: =============================== Port Scanning is a essential network utility for every IT professional and this i...

LAN Scan HD v1.20 iOS - Command Inject Vulnerability

Lan Scan HD version 1.20 suffers from a command injection vulnerability. Document Title: =============== LAN Scan HD v1.20 iOS - Command Inject Vulnerability Product & Service Introduction: =============================== See whats all connect to your favorite public WiFi network or your home...