Device Inspector 1.5 Command Injection

Document Title: =============== Device Inspector v1.5 iOS - Command Inject Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1558 Release Date: ============= 2015-08-07 Vulnerability Laboratory ID VL-ID: ====================================...

The vulnerability of the InfoSphere Information Server software platform, which allows a perpetrator to gain access to protected information

The vulnerability of the InfoSphere Information Server software installer is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating locally, to gain access to protected information using standard commands...

Oracle solaris DHCP Server Component Denial of Service Vulnerability

Oracle solaris is a unix operating system. A security vulnerability in the Oracle solaris kernel domain virtualization NIC driver component allows local attackers to exploit the vulnerability to crash the system...

Oracle solaris kernel domain virtualization NIC driver component denial of service vulnerability

Oracle solaris is a unix operating system. A security vulnerability in the Oracle solaris kernel domain virtualization NIC driver component allows local attackers to exploit the vulnerability to crash the system...

Oracle Berkeley DB Local Arbitrary Code Execution Vulnerability (CNVD-2015-04770)

Oracle Berkeley DB is the industry's leading open source, embeddable storage engine that provides developers with a fast, reliable native database that requires no administration. A security vulnerability exists in the Oracle Berkeley DB Data Store component that can be exploited by a local...

UDID+ 2.5 Command Injection

Document Title: =============== UDID+ v2.5 iOS - Mail Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1542 Release Date: ============= 2015-07-06 Vulnerability Laboratory ID VL-ID: ==================================== 1542...

Adobe Reader AdobeARM Denial of Service Vulnerability

This vulnerability allows local attackers to delete files on vulnerable installations of Adobe Reader. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of junction points in AdobeARM.exe. A local attacker running code as a normal user can...

Adobe Reader ARMSvc Elevation of Privilege Vulnerability

This vulnerability allows local attackers to elevate privileges on vulnerable installations of Adobe Reader. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ARMSvc service. An attacker can force the service to overwrite the Adobe updater with any...

WK UDID 1.0.1 Command Injection

Document Title: =============== WK UDID v1.0.1 iOS - Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1539 Release Date: ============= 2015-07-01 Vulnerability Laboratory ID VL-ID: ==================================== 1539...

UDID+ v2.5 iOS - Mail Command Inject Vulnerability

Document Title: =============== UDID+ v2.5 iOS - Mail Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1542 Release Date: ============= 2015-07-06 Vulnerability Laboratory ID VL-ID: ==================================== 1542...

Apple MAC OS X NTFS Memory Layout Disclosure Vulnerability

Apple Mac OS X is a commercial operating system. A security vulnerability exists in Apple Mac OS X NTFS that allows local attackers to exploit the vulnerability to run malicious applications to obtain kernel memory layout...

IBM Maximo Asset Management Information Disclosure Vulnerability (CNVD-2015-04186)

IBM Maximo Asset Management is a suite of IT asset management solutions from IBM USA. An information disclosure vulnerability exists in IBM Maximo Asset Management, which allows local attackers to exploit the vulnerability to obtain sensitive information...

The vulnerability of the Cisco UCS Central device’s centralized management system allows a perpetrator to gain privileges necessary to execute operating system commands.

The vulnerability of the Cisco UCS Central device management system exists because measures to neutralize the special elements used in the operating system command are not taken. Exploiting this vulnerability can allow a malicious actor, operating locally, to gain privileges necessary to execute...

FCS Scanner v1.0 & v1.4 - Command Inject Vulnerability

Document Title: =============== FCS Scanner v1.0 & v1.4 - Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1538 Release Date: ============= 2015-06-30 Vulnerability Laboratory ID VL-ID: ==================================== 153...

didjvu and pdf2djvu Insecure Temporary File Creation Vulnerability

didjvu is a Python module, which uses a separate Kamera framework, foreground and background layers, and then into the DjVu file encoding. pdf2DjVu's main function is to djvu to pdf, is a command line djvu format, pdf format, inter-conversion tool. didjvu and pdf2djvu in the existence of security...

Microsoft Windows Memory Misreference Vulnerability

Microsoft Windows is a popular operating system. A memory misreference vulnerability exists in the Microsoft Windows kernel processing object, which allows local attackers to exploit the vulnerability to execute arbitrary code with elevated privileges...

Microsoft Windows Station Memory Misreference Vulnerability

Microsoft Windows is a popular operating system. A memory misreference vulnerability exists in Microsoft Windows Station, which allows local attackers to exploit the vulnerability to execute arbitrary code with elevated privileges...

Microsoft Windows Kernel 'Win32k.sys' Buffer Overflow Vulnerability

Microsoft Windows is a popular operating system. A buffer overflow vulnerability in Microsoft Windows Kernel 'Win32k.sys' allows local attackers to exploit the vulnerability to execute arbitrary code with elevated privileges...

Linux Kernel UDF File System Denial of Service Vulnerability

Linux kernel is an open source operating system. A security vulnerability in the Linux kernel UDF file system allows local attackers to exploit the vulnerability for denial of service attacks...

QEMU Unmediated PCI Register Access Vulnerability

QEMU is an open source emulator software. QEMU fails to properly restrict write access to the PCI configuration space of certain PCI passthrough devices, which can allow local x86 HVM clients to gain elevated privileges, cause denial of service, access sensitive information, and more...