6419 matches found
UBUNTU-CVE-2015-2045
The HYPERVISORxenversion hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which allows local guest users to obtain sensitive information via unspecified vectors...
PuTTY Local Information Disclosure Vulnerability
PuTTY is a free Telnet, Rlogin and SSH client software developed by software developer Simon Tatham. The software is mainly used for remote administration of Linux systems. PuTTY suffers from a local information disclosure vulnerability that can be exploited by attackers to access process memory...
Microsoft Windows Kernel Mode Driver CVE-2015-0095 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information such as kernel memory contents. This may aid in launching further attacks. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1...
Microsoft Windows Kernel Mode Driver CVE-2015-0077 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information such as kernel memory contents. This may aid in launching further attacks. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1...
SPCanywhere Local Information Disclosure Vulnerability
SPCanywhere is the mobile application. The Siemens SPC intrusion alarm system can be accessed remotely from your cell phone. SPCanywhere suffers from a local information disclosure vulnerability that could be exploited by an attacker to obtain sensitive information...
IBM Flex System Manager Local Information Disclosure Vulnerability
IBM Flex System Manger is an integrated system management across compute, storage and network resources. A security vulnerability exists in IBM Flex System Manger that could be exploited by a local attacker to obtain sensitive information...
ownCloud 'OC_Util::getUrlContent()' Local Information Disclosure Vulnerability
ownCloud is a free and open source personal cloud storage solution created by German KDE developer Frank Karlitschek. The solution offers file management, music storage, calendars, and more. A local information disclosure vulnerability exists in ownCloud 'OCUtil::getUrlContent', which allows...
Linux Kernel 'evdev.c' Local Information Disclosure Vulnerability
Linux is an open source computer operating system kernel. Linux Kernel 'evdev.c' has a local information disclosure vulnerability that can be exploited by a local attacker to cause a memory leak that can be used to obtain sensitive information...
kwallet Local Information Disclosure Vulnerability
kwallet is a secure desktop-level password storage framework. A local information disclosure vulnerability exists in kwallet. A local attacker could exploit this vulnerability to obtain sensitive information...
CGManager Local Information Disclosure Vulnerability
CGManage is a program manager, a software to categorize and manage programs plug-ins, an extension and extension of the system desktop as well as functionality. CGManage version 0.32 fails to perform nesting correctly when modifying attributes in cgroups, allowing local users to set cgroup values...
GNU Emacs Local Information Disclosure Vulnerability
Emacs is an extensible real-time display editor. A local information disclosure vulnerability exists in GNU Emacs, which allows attackers to exploit the vulnerability to obtain sensitive information...
CVE-2014-2608
Unspecified vulnerability in HP Smart Update Manager 6.x before 6.4.1 on Windows, and 6.2.x through 6.4.x before 6.4.1 on Linux, allows local users to obtain sensitive information, and consequently gain privileges, via unknown vectors...
Centreon <= 2.5.3 Multiple Vulnerabilities - Active Check
Centreon is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:centreon:centreon"; ifdescription...
EMC NetWorker Module for MEDITECH 3.0 Build 87 - 90 Local Information Disclosure
The version of EMC NetWorker formerly Legato NetWorker Module for MEDITECH NMMEDI installed on the remote host is 3.0 build 87 - 90. It is, therefore, affected by a local information disclosure vulnerability due to RecoverPoint and Plink commands storing plaintext RecoverPoint Appliance login...
Folder Lock 5.9.5 Weak Password Encryption Local Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30766/info Folder Lock is prone to an information-disclosure vulnerability because it stores credentials in an insecure manner. A local attacker can exploit this issue to obtain passwords used by the application, which ma...
FUSE 2.2/2.3 - Local Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13857/info FUSE is susceptible to a local information disclosure vulnerability. This issue is due to a failure of the kernel module to properly clear used memory prior to its reuse. This vulnerability allows malicious loc...
FreeBSD <= 7.1 libc Berkley DB Interface Uninitialized Memory Local Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34666/info FreeBSD is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. include sys/types.h include db.h includ...
USN-2226-1 linux vulnerabilities
Matthew Daley reported an information leak in the floppy disk driver of the Linux kernel. An unprivileged local user could exploit this flaw to obtain potentially sensitive information from kernel memory. CVE-2014-1738 Matthew Daley reported a flaw in the handling of ioctl commands by the floppy...
IBM Cognos Express本地信息泄漏漏洞
Bugtraq ID:66362 CVE ID:CVE-2013-5444 IBM Cognos Express是一款为满足中型企业的需求而构建的商业智能和计划集成解决方案。 IBM Cognos Express使用静态密钥进行加密,可帮助攻击者对不能访问的敏感信息进行解密。 0 IBM Cognos Express 10.2.1 IBM Cognos Express 10.1 IBM Cognos Express 9.5 IBM Cognos Express 9.0 用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞:...
Citrix NetScaler应用交付控制器本地信息泄露漏洞(CVE-2013-6940)
BUGTRAQ ID: 66020 CVECAN ID: CVE-2013-6940 Citrix NetScaler是一款网络流量管理产品。 Citrix NetScaler SDX 10.0及9.3版本的应用支付控制器在实现上存在安全漏洞,攻击者可利用此漏洞将用户凭证记录到磁盘,导致信息泄露。 0 Citrix NetScaler SDX 9.x Citrix NetScaler SDX 10.x 厂商补丁: Citrix ------ Citrix已经为此发布了一个安全公告(CTX139049)以及相应补丁: CTX139049:Citrix NetScaler Applicati...