Microsoft Internet Explorer CVE-2016-3321 Local Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to a local information-disclosure vulnerability. An authenticated attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Internet Explorer 10 and 11 are vulnerable. Technologies Affected Microsoft Internet...

CVE-2016-0380: Undefined Security Weakness

IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file permissions of 0664, which allows local users to obtain sensitive information via standard filesystem operations...

Google Nexus Local Information Disclosure Vulnerability

Google Nexus is Google's line of high-end cell phones powered by stock Android. Google Nexus has a local information disclosure vulnerability that can be exploited by attackers to obtain sensitive information that may be useful in launching further attacks...

Nettle RSA Code Local Information Disclosure Vulnerability

Nettle is a library of basic cryptographic functions. A local information disclosure vulnerability exists in Nettle RSA Code, which can be exploited by a local attacker to obtain sensitive information...

Linux kernel local information disclosure vulnerability (CNVD-2016-05852)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local information disclosure vulnerability exists in Linux kernel, which can be exploited by local attackers to obtain sensitive information...

Linux kernel 'perf_callchain.c' local information disclosure vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local information disclosure vulnerability exists in the Linux kernel. A local attacker could exploit this vulnerability to obtain sensitive information...

GNOME NetworkManager Local Information Disclosure Vulnerability

GNOME NetworkManager is a set of network management tools developed by The GNOME Project for simplifying network configuration on Linux and other Unix-like operating systems. A local information disclosure vulnerability exists in versions of GNOME NetworkManager prior to 1.0.12. An attacker could...

OpenLDAP openldap-servers Local Information Disclosure Vulnerability

OpenLDAP is a free and open source implementation of the Lightweight Directory Access Protocol LDAP. openldap-servers is one of the server-sides. A security vulnerability in OpenLDAP openldap-servers allows remote attackers to submit a special request to obtain sensitive information...

IBM WebSphere DataPower XC10 Appliance Local Information Disclosure Vulnerability (CNVD-2016-04905)

IBM WebSphere DataPower XC10 is a suite of caching platforms from IBM in the United States. A local information disclosure vulnerability exists in the IBM WebSphere DataPower XC10 Appliance, which can be exploited by an attacker to obtain sensitive information...

Red Hat libvirt Local Information Disclosure Vulnerability

Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. It supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A local information disclosure vulnerability exists in Red Ha...

Microsoft Windows Kernel CVE-2016-3272 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability that occurs in the Windows kernel because it fails to properly validate certain system calls. An attacker can leverage this issue to disclose the kernel memory and obtain sensitive information that may aid in...

SQLite Information Disclosure Vulnerability

SQLite is an open source C-based embedded relational database management system developed by American software developer D. Richard Hipp. The system is characterized by independence, isolation, cross-platform and so on. SQLite 3.13.0 before the version of a security vulnerability , the...

PT-2017-17770 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.6.2 Description: The issue allows local users to obtain sensitive information from other users' files under specific circumstances. This can happen when the ext4 data=ordered mode is used and a...

Microsoft Windows Virtual PCI CVE-2016-3232 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Recommendations Permit...

CVE-2016-4527: Undefined Security Weakness

ABB PCM600 before 2.7 improperly stores PCM600 authentication credentials, which allows local users to obtain sensitive information via unspecified vectors...

PT-2016-5973 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.7 Description: The issue concerns the proc connectinfo function in the Linux kernel, which fails to initialize a certain data structure. This allows local users to obtain sensitive information from kernel stac...

MGASA-2016-0195 Updated networkmanager packages fix CVE-2016-0764

Updated networkmanager package fixes security vulnerability: NetworkManager before 1.0.12 is vulnerable to a race condition that could lead to a local information leak CVE-2016-0764. The networkmanager package has been updated to version 1.0.12, which fixes this issue and several other bugs. See...

IBM Financial Transaction Manager for Corporate Payment Services Local Information Disclosure Vulnerability

IBM Financial Transaction Manager FTM for Corporate Payment Services is a Financial Transaction Manager product from IBM USA, which is used to monitor, track and report on financial payments and transactions. A security vulnerability exists in IBM FTM for Corporate Payment Services on multiple...

IBM Capacity Management Analytics Local Information Disclosure Vulnerability (CNVD-2016-01392)

IBM Capacity Management Analytics is a suite of capacity management analytics solutions for managing and predicting the utilization of IBM zEnterprise infrastructure resources. A local security vulnerability exists in IBM Capacity Management Analytics that allows a local attacker to exploit the...

IBM Capacity Management Analytics Local Information Disclosure Vulnerability (CNVD-2016-01329)

IBM Capacity Management Analytics is a suite of capacity management analytics solutions from IBM USA for managing and predicting the usage of IBM zEnterprise infrastructure mainframe computer resources. A local information disclosure vulnerability exists in IBM Capacity Management Analytics. A...