CodeWrights 'HART DTM' Library Local Denial of Service Vulnerability

HART Device Type Manager is a device type manager. A local denial of service vulnerability exists in CodeWrights 'HART DTM' Library, which can be exploited by local attackers to launch denial of service attacks...

xbindkeys-config '/tmp/xbindkeysrc-tmp' local temporary file creation vulnerability

xbindkeys-config is the GTK front end for xbindkeys. A local temporary file creation vulnerability exists in bindkeys-config '/tmp/xbindkeysrc-tmp' which allows local attackers to corrupt system files via symbolic links...

EDK1 UEFI 'FSVariable.c' Local Buffer Overflow Vulnerability

EDK1 is an open source project that provides a reference implementation of the Unified Extensible Firmware Interface UEFI. The commercial UEFI implementation merges parts of the EDK1 source code. A local buffer overflow vulnerability exists in EDK1 UEFI 'FSVariable.c'. Due to the program failing ...

Huawei eSpace Desktop V100R001C03 Denial of Service Vulnerability (CNVD-2015-00027)

Huawei eSpace Desktop is a Unified Communications PC client developed by Huawei. A denial of service vulnerability exists in Huawei eSpace Desktop before V100R001C03 that allows local users to cause a denial of service via a crafted QES file...

UBUNTU-CVE-2014-8136

The 1 qemuDomainMigratePerform and 2 qemuDomainMigrateFinish2 functions in qemu/qemudriver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors...

Mobilis MobiConnect 3G ZDServer 1.x - Privilege Escalation

Document Title: =============== Mobilis MobiConnect 3G ZDServer 1.x - Privilege Escalation References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1385 Release Date: ============= 2014-12-19 Vulnerability Laboratory ID VL-ID: ====================================...

mysql: unspecified MyISAM temporary file issue fixed in 5.5.39 and 5.6.20

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to SERVER:MyISAM...

CVE-2014-9090

The dodoublefault function in arch/x86/kernel/traps.c in the Linux kernel through 3.17.4 does not properly handle faults associated with the Stack Segment SS segment register, which allows local users to cause a denial of service panic via a modifyldt system call, as demonstrated by sigreturn32 i...

F5 BIG-IP 10.1.0 Directory Traversal

+------------------------------------------------------+ + F5 BIG-IP 10.1.0 - Directory Traversal Vulnerability + +------------------------------------------------------+ Affected Product : F5 BIG-IP Vendor Homepage : http://www.f5.com/ Version : 10.1.0 Vulnerability Category : Local vulnerabilit...

JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment...

Chkrootkit 0.49-local mention the right vulnerability-vulnerability warning-the black bar safety net

Chkrootkit =0.49 Local Root Vulnerability: less than or equal to 0. 4 9 version of chrootkit local mention the right vulnerability. The first to demonstrate it: You can view your own installation is not allow to the latest version, or download the vulnerable versions of the experiment: wget wget...

ProFTPd Local pr_ctrls_connect Vulnerability - ftpdctl vulnerability and exploit code analysis-vulnerability warning-the black bar safety net

Exploit code URL: http://www.exploit-db.com/exploits/394/ ! 1, Operating environment: 1, The ProFTPD 1.3.0/1.3.0 a 2, the compiled ProFTPD,--enable-ctrls option must be open ./ configure --enable-ctrls 2, The Run parameters: root@kali: gcc 3 9 4. c-o 3 9 4 root@kali: ./ 3 9 4 –s option -p...

VoipSwitch - 'user.php' Local File Inclusion

source: https://www.securityfocus.com/bid/69109/info VoipSwitch is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the web server process...

UBUNTU-CVE-2014-4261

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than...

UBUNTU-CVE-2014-2487

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.14, when running on Windows, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a differen...

UBUNTU-CVE-2014-2477

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2486...

UBUNTU-CVE-2014-2489

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core...

HP Tru64 NLSPATH Environment Variable Local Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/5647/info Tru64 is a commercially available UNIX operating system. Tru64 was originally developed by Digital and is now distributed and maintained by HP. A buffer overflow has been discovered in a number of Tru64 binaries...

Darwin Kernel 7.1 Mach File Parsing Local Integer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12314/info Reportedly a local integer overflow vulnerability affects the Darwin Kernel. This issue is due to a failure of the affected to properly handle integer signedness. An attacker may leverage this issue to cause th...

Linux Kernel <= 2.6 Console Keymap Local Command Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15122/info The Linux kernel is susceptible to a local command-injection vulnerability via console keymap modifications. This issue occurs because unprivileged users can alter the system-wide console keymap. Local users ma...