CVE-2017-10169

Vulnerability in the Oracle Hospitality 9700 component of Oracle Hospitality Applications subcomponent: Operation Security. The supported version that is affected is 4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality 9700...

CVE-2017-10169

The CVE-2017-10169 entry applies to Oracle Hospitality 9700 (Operation Security subcomponent) and affects version 4.0. The vulnerability can be exploited by a low-privileged attacker who has logon to the infrastructure where Oracle Hospitality 9700 runs, potentially leading to unauthorized access...

kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests

The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lacked certain checks for the end of a buffer. A remote attacker could trigger a pointer-arithmetic error or possibly cause other unspecified impacts using crafted requests related to fs/nfsd/nfs3xdr.c and...

CVE-2017-9770

A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse that can cause an out of bounds read operation to occur due to a field within the IOCTL data being used as a length...

kernel: Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c

Incorrect error handling in the setmempolicy and mbind compat syscalls in 'mm/mempolicy.c' in the Linux kernel allows local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation...

Unspecified Vulnerability in Oracle Hospitality 9700 (CNVD-2017-20287)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle.Hospitality 9700 is one of the hospitality management components. A security vulnerability exists in the Operation Security subcomponent of the Hospitality 97...

CopyKittens Exposed by ClearSky and Trend Micro

CopyKittens is a cyberespionage group that ClearSky has been reporting on since 2015, tracking their attacks on government-related bodies around the world. Trend Micro has supported this research at several points, including for their latest report released today on the group’s vast espionage...

Experts Unveil Cyber Espionage Attacks by CopyKittens Hackers

Security researchers have discovered a new, massive cyber espionage campaign that mainly targets people working in government, defence and academic organisations in various countries. The campaign is being conducted by an Iran-linked threat group, whose activities, attack methods, and targets hav...

ubuntu-image Unauthorized Operation Vulnerability

ubuntu-image is an image package used in Ubuntu systems. A security vulnerability exists in ubuntu-image. A local attacker can exploit this vulnerability to gain access to the cloud-init and snapd directories...

Weak Password Vulnerability in DebugShell of Various ZTE OLT PON Devices

ZTE OLT C200, C220, C300, and C320 are key PON devices used in optical switching networks in the telecommunications industry. A weak password vulnerability exists in DebugShell of various ZTE OLT PON devices, which can be exploited by an attacker to add passwords for daily operation accounts,...

Siemens SIMATIC Sm@rtClient Android App

CVSS v3 7.4 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIMATIC Sm@rtClient Android App Vulnerabilities: Man-in-the-Middle, Authentication Bypass Using an Alternate Path or Channel AFFECTED PRODUCTS Siemens reports that the vulnerabilities affect the...

Siemens SiPass Integrated Unauthorized Operation Vulnerability

SiPass server is a component of the SiPass centralized access control system that receives connections from clients for communication. An unauthorized operation vulnerability exists in Siemens SiPass integrated, where an attacker in an intermediate location between the SiPass integrated server an...

forums.operationsports.com Open Redirect vulnerability

Vulnerable URL: http://forums.operationsports.com/forums/redirect-to/?redirect=https%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.10.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

Google Android WideVine DRM buffer overflow vulnerability (CNVD-2017-13522)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A buffer overflow vulnerability exists in the WideVine DRM in Android, which allows an attacker to exploit the vulnerability to submit a special request to perform an unauthorized...

Failed to Start a VM Error : The SR Failed to Complete the Operation

The SR failed to complete the operation...

The vulnerability of Xen hypervisors, allowing a attacker to gain access to the hypervisor’s memory

The vulnerability of Xen hypervisors known as XSA-212 is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating locally, to gain access to the hypervisor’s memory beyond the guest system’s input/output arrays, given that XSA-29 previously...

Design/Logic Flaw

fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount operation failure on unsafely created temporary directories...

CVE-2017-7496

fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount operation failure on unsafely created temporary directories...

CVE-2017-7496

fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount operation failure on unsafely created temporary directories...

CVE-2017-7496

CVE-2017-7496 affects fedora-arm-installer up to 1.99.16, where local privilege escalation can occur due to not checking the error condition of a mount operation on unsafely created temporary directories. NVD lists CVSSv2 base score 4.4 (LOCAL, partial confidentiality/integrity/availability impac...