DEBIAN-CVE-2010-3359

If LDLIBRARYPATH is undefined in gargoyle-free before 2009-08-25, the variable will point to the current directory. This can allow a local user to trick another user into running gargoyle in a directory with a cracked libgarglk.so and gain access to the user's account...

CVE-2010-2064

CVE-2010-2064 affects rpcbind 0.2.0; local attackers can write to arbitrary files or gain privileges via a symlink attack on /tmp/portmap.xdr and /tmp/rpcbind.xdr. Root cause: incorrect handling of symbolic links in temporary files leads to privilege/escalation risk. Exploitation details are not ...

Command Execution Vulnerability in Pluck-CMS

Pluck is a very simple and easy to use CMS Content Management System for PHP platforms. A command execution vulnerability exists in Pluck-CMS, which can be exploited by an attacker to execute remote code to gain privileges in a web application...

ALPINE-CVE-2019-17347

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because a guest can manipulate its virtualised %cr4 in a way that is incompatible with Linux and possibly other guest kernels...

CVE-2019-17341

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a page-writability race condition during addition of a passed-through PCI device...

Xen Denial of Service Vulnerability (CNVD-2019-34764)

Xen is an open source virtual machine monitor product. Xen has a denial of service vulnerability that can be exploited by x86 client OS attackers to cause a denial of service or gain privileges...

Xen Denial of Service Vulnerability (CNVD-2019-34769)

Xen is an open source virtual machine monitor product. Xen has a denial of service vulnerability that can be exploited by x86 PV client OS attackers to cause a denial of service or gain privileges...

CVE-2019-15067 An authentication bypass vulnerability discovered in Smart Battery A2-25DE

An authentication bypass vulnerability discovered in Smart Battery A2-25DE, a multifunctional portable charger, firmware version ?= SECFS-2013-10-16-13:42:58-629c30ee-60c68be6. An attacker can bypass authentication and gain privilege by modifying the login page...

Command execution vulnerability in Ocean CMS co***.php file

Ocean CMS is a video-on-demand system designed for webmasters with different needs. A command execution vulnerability exists in the Ocean CMS co.php file. It allows attackers to remotely execute commands and gain server privileges...

The vulnerability of the Intel Turbo Boost Max Technology driver installation program allows a hacker to increase their privileges.

The vulnerability of the Intel Turbo Boost Max Technology driver installation program is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

KLA11874 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...

The vulnerability of microprogramming software in Intel Active Management Technology arises due to insufficient testing of input data, allowing attackers to exploit their privileges.

The vulnerability of Intel Active Management Technology’s microprogramming software exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

KLA11439 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities was found in Mozilla Firefox. Malicious users can exploit this vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, gain privileges and spoof user interface. Original advisories Mozilla Foundation Security Advisory 2019-07...

The installation program of the Intel Parallel Studio XE for Windows toolset is vulnerable, allowing attackers to exploit their privileges.

The vulnerability of the Intel Parallel Studio XE for Windows toolset installation program is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Weak Password Vulnerability in Website Building System of Zaozhuang Intech Information Network Co.

Zaozhuang Intech Information Network Co., Ltd. is a network provider specializing in information construction services for enterprises and institutions, focusing on website production, software development, system integration and other project development. There is a weak password vulnerability i...

Command Execution Vulnerability in IBOS Enterprise Collaboration Software Version 4.5.4

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A command execution vulnerability exists in IBOS Enterprise Collaboration Management Software version 4.5.4. Allows an attacker to remotely execute commands and gain server privileges...

CVE-2018-0656

Untrusted search path vulnerability in The installer of Digital Paper App version 1.4.0.16050 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

PT-2018-2684 · Xen +4 · Xen +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.17.12 Xen versions prior to 4.11.x Description: An issue in the Linux kernel and Xen hypervisor allows local users to cause a denial of service or possibly gain privileges. The xen failsafe callback entry poin...

KLA11298 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface, gain privileges, write local files and obtain sensitive information. Below i...

Code Execution Vulnerability in LeShang Mall System v2.2.0

LeShang mall system is a based on THINKPHP5.0 as the core development of a free open source professional mall system. Code execution vulnerability exists in LeShang Mall System v2.2.0. An attacker can exploit the vulnerability to write arbitrary files and gain server privileges...