Oracle VirtualBox Multiple Vulnerabilities (Feb 2015) - Mac OS X

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Linux Kernel Local Denial of Service Vulnerability (CNVD-2015-00797)

Linux is an open source computer operating system kernel. Linux Kernel suffers from a local denial of service vulnerability that can be exploited by local attackers to cause a denial of service...

Apple MAC OS X Yosemite IOBluetoothFamily Integer Overflow Vulnerability

Apple MAC OS X Yosemite is the latest operating system developed by Apple. Apple MAC OS X Yosemite suffers from an integer overflow vulnerability in the handling of IOBluetoothFamily, which allows local attackers to exploit the vulnerability to manipulate kernel memory and execute arbitrary code...

Apple MAC OS X Yosemite Thunderbolt Device Firmware Modification Vulnerability

Apple MAC OS X Yosemite is the latest operating system developed by Apple. Apple MAC OS X Yosemite links Thunderbolt devices during EFI updates, allowing local attackers to exploit vulnerabilities that can be exploited to modify host firmware...

T-Mobile Internet Manager - DLL Hijacking (mfc71enu.dll)

Document Title: =============== T-Mobile Internet Manager - DLL Hijacking mfc71enu.dll References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1427 Release Date: ============= 2015-01-29 Vulnerability Laboratory ID VL-ID: ==================================== 142...

Vorbis Tools Denial of Service Vulnerability (CNVD-2015-00652)

vorbis-tools is a set of Ogg an audio compression format vorbis tools. Vorbis Tools suffers from a local denial of service vulnerability, which can be exploited by local attackers to cause a system crash and deny service to legitimate users...

pxz Insecure File Permissions Vulnerability

pxz is a compression tool for linux. An insecure file permission vulnerability exists in pxz, which allows local attackers to exploit the vulnerability to access globally readable files and obtain sensitive information...

openSUSE Security Update : util-linux (openSUSE-SU-2015:0066-1)

util-linux was updated to fix a security issue, where local attackers might be able to execute code as root with a prepared USB stick CVE-2014-9114 bsc907434. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

VeryPhoto 3.0 Command Injection Vulnerability

VeryPhoto version 3.0 suffers from a command injection vulnerability. Document Title: =============== VeryPhoto v3.0 iOS - Command Injection Vulnerability Product & Service Introduction: =============================== VeryPhoto Pro is your side of the most powerful local album management softwar...

VeryPhoto 3.0 Command Injection

Document Title: =============== VeryPhoto v3.0 iOS - Command Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1401 Release Date: ============= 2015-01-13 Vulnerability Laboratory ID VL-ID: ==================================== 1401...

Microsoft Windows Error Reporting Security Feature Bypass Vulnerability (3004365)

This host is missing an important security update according to Microsoft Bulletin MS15-006. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Apple Mac OS X XPC Type Obfuscated Local Elevation of Privilege Vulnerability

Apple Mac OS X is a BSD-based operating system of a commercial nature. A local elevation of privilege vulnerability exists in Apple Mac OS X XPC type obfuscation, which allows local attackers to exploit this vulnerability to elevate privileges...

VeryPhoto v3.0 iOS - Script Code Inject Web Vulnerability

Document Title: =============== VeryPhoto v3.0 iOS - Script Code Inject Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1401 Release Date: ============= 2015-01-13 Vulnerability Laboratory ID VL-ID: ====================================...

Microsoft Windows Error Reporting CVE-2015-0001 Local Security Bypass Vulnerability

Description Microsoft Windows Error Reporting is prone to a local security-bypass vulnerability. Local attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. Successful exploits may lead to other attacks. Technologies Affected Microsoft Windows ...

ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities

Document Title: =============== ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1392 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0974 CVE-ID: ======= CVE-2015-0974 Release Date:...

ZTE Ucell 3G Modem App - Privilege Escalation Vulnerability

Document Title: =============== ZTE Ucell 3G Modem App - Privilege Escalation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1387 Release Date: ============= 2014-12-24 Vulnerability Laboratory ID VL-ID: ===================================...

BitRaider Streaming Client 1.3.3.4098 Local Privilege Escalation Vulnerability

Summary BitRaider is a video game streaming and download service. Description BitRaider contains a flaw that leads to unauthorized privileges being gained. The issue is due to the program granting improper permissions with the 'F' flag for the 'Users' group, which makes the entire 'BitRaider'...

iBackup v10.0.0.45 - Privilege Escalation Vulnerability

Document Title: =============== iBackup v10.0.0.45 - Privilege Escalation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1382 Release Date: ============= 2014-12-18 Vulnerability Laboratory ID VL-ID: ==================================== 13...

iBackup v10.0.0.45 - Privilege Escalation Vulnerability

Document Title: =============== iBackup v10.0.0.45 - Privilege Escalation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1382 Release Date: ============= 2014-12-18 Vulnerability Laboratory ID VL-ID: ==================================== 13...

FileBug v1.5.1 iOS - Directory Traversal Vulnerability

Document Title: =============== FileBug v1.5.1 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1342 Release Date: ============= 2014-10-14 Vulnerability Laboratory ID VL-ID: ==================================== 134...