Linux Kernel 'evdev.c' Local Information Disclosure Vulnerability

Linux is an open source computer operating system kernel. Linux Kernel 'evdev.c' has a local information disclosure vulnerability that can be exploited by a local attacker to cause a memory leak that can be used to obtain sensitive information...

kwallet Local Information Disclosure Vulnerability

kwallet is a secure desktop-level password storage framework. A local information disclosure vulnerability exists in kwallet. A local attacker could exploit this vulnerability to obtain sensitive information...

PT-2015-3310

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC STEP 7 TIA Portal versions prior to 14 Description The issue is related to the incorrect storage of pre-shared keys in TIA project files. This could allow a local attacker to gain access to sensitive information, potentially by...

CGManager Local Information Disclosure Vulnerability

CGManage is a program manager, a software to categorize and manage programs plug-ins, an extension and extension of the system desktop as well as functionality. CGManage version 0.32 fails to perform nesting correctly when modifying attributes in cgroups, allowing local users to set cgroup values...

GNU Emacs Local Information Disclosure Vulnerability

Emacs is an extensible real-time display editor. A local information disclosure vulnerability exists in GNU Emacs, which allows attackers to exploit the vulnerability to obtain sensitive information...

CVE-2014-2608

Unspecified vulnerability in HP Smart Update Manager 6.x before 6.4.1 on Windows, and 6.2.x through 6.4.x before 6.4.1 on Linux, allows local users to obtain sensitive information, and consequently gain privileges, via unknown vectors...

Centreon <= 2.5.3 Multiple Vulnerabilities - Active Check

Centreon is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:centreon:centreon"; ifdescription...

EMC NetWorker Module for MEDITECH 3.0 Build 87 - 90 Local Information Disclosure

The version of EMC NetWorker formerly Legato NetWorker Module for MEDITECH NMMEDI installed on the remote host is 3.0 build 87 - 90. It is, therefore, affected by a local information disclosure vulnerability due to RecoverPoint and Plink commands storing plaintext RecoverPoint Appliance login...

CVE-2014-8529: Undefined Security Weakness

McAfee Network Data Loss Prevention NDLP before 9.3 stores the SSH key in cleartext, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2014-4200: Undefined Security Weakness

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local users to obtain sensitive information by extracting files from this archive...

CVE-2014-1317: Exposure of Sensitive Information to an Unauthorized Actor

iBooks Commerce in Apple OS X before 10.9.4 places Apple ID credentials in the iBooks log, which allows local users to obtain sensitive information by reading this file...

Folder Lock 5.9.5 Weak Password Encryption Local Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30766/info Folder Lock is prone to an information-disclosure vulnerability because it stores credentials in an insecure manner. A local attacker can exploit this issue to obtain passwords used by the application, which ma...

FUSE 2.2/2.3 - Local Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13857/info FUSE is susceptible to a local information disclosure vulnerability. This issue is due to a failure of the kernel module to properly clear used memory prior to its reuse. This vulnerability allows malicious loc...

FreeBSD <= 7.1 libc Berkley DB Interface Uninitialized Memory Local Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34666/info FreeBSD is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. include sys/types.h include db.h includ...

CVE-2014-0202

The setup script in ovirt-engine-dwh, as used in the Red Hat Enterprise Virtualization Manager data warehouse rhevm-dwh package before 3.3.3, stores the history database password in cleartext, which allows local users to obtain sensitive information by reading an unspecified file...

USN-2226-1 linux vulnerabilities

Matthew Daley reported an information leak in the floppy disk driver of the Linux kernel. An unprivileged local user could exploit this flaw to obtain potentially sensitive information from kernel memory. CVE-2014-1738 Matthew Daley reported a flaw in the handling of ioctl commands by the floppy...

PT-2014-5146

Name of the Vulnerable Software and Affected Versions ldns versions 1.6.x Description The issue concerns the ldns-keygen tool in ldns, which uses the current umask to set the privileges of the private key. This might allow local users to obtain the private key by reading the file. Recommendations...

IBM Cognos Express本地信息泄漏漏洞

Bugtraq ID:66362 CVE ID:CVE-2013-5444 IBM Cognos Express是一款为满足中型企业的需求而构建的商业智能和计划集成解决方案。 IBM Cognos Express使用静态密钥进行加密，可帮助攻击者对不能访问的敏感信息进行解密。 0 IBM Cognos Express 10.2.1 IBM Cognos Express 10.1 IBM Cognos Express 9.5 IBM Cognos Express 9.0 用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞：...

Citrix NetScaler应用交付控制器本地信息泄露漏洞(CVE-2013-6940)

BUGTRAQ ID: 66020 CVECAN ID: CVE-2013-6940 Citrix NetScaler是一款网络流量管理产品。 Citrix NetScaler SDX 10.0及9.3版本的应用支付控制器在实现上存在安全漏洞，攻击者可利用此漏洞将用户凭证记录到磁盘，导致信息泄露。 0 Citrix NetScaler SDX 9.x Citrix NetScaler SDX 10.x 厂商补丁： Citrix ------ Citrix已经为此发布了一个安全公告（CTX139049）以及相应补丁: CTX139049：Citrix NetScaler Applicati...

CVE-2014-2038

The nfscanextendwrite function in fs/nfs/write.c in the Linux kernel before 3.13.3 relies on a write delegation to extend a write operation without a certain up-to-date verification, which allows local users to obtain sensitive information from kernel memory in opportunistic circumstances by...