UBUNTU-CVE-2016-3134

The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service heap memory corruption via an IPTSOSETREPLACE setsockopt call...

CVE-2016-2071

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allows remote attackers to gain privileges via unspecified NS Web GUI commands...

CVE-2016-0766

PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings GUCS for PL/Java, which allows attackers to gain privileges via unspecified vectors...

Huawei ALE and GEM-703L Joint Photographic Experts Group Processing Unit Denial of Service Vulnerability

The Huawei ALE smartphone and GEM-703L smartphone are smartphones from Huawei, China.Joint Photographic Experts Group Processing Unit JPU is one of the drivers.... A security vulnerability in the JPU driver for the Huawei ALE smartphone and GEM-703L smartphone allows remote attackers to gain syst...

Arbitrary File Upload Vulnerability in Broadband Authentication and Billing System of Chengdu Starry Blue Ocean Network Technology Co.

Blue Ocean Premier Broadband Access Gateway is a specialized intelligent device for Ethernet broadband access. An arbitrary file upload vulnerability exists in the broadband authentication billing system of Chengdu Starry Blue Ocean Network Technology Co., Ltd. An upload point exists in the...

UBUNTU-CVE-2015-8543

The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifiers for certain protocol families, which allows local users to cause a denial of service NULL function pointer dereference and system crash or possibly gain...

CVE-2015-7917

Untrusted search path vulnerability in Open Automation OPC Systems.NET 8.00.0023 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

PT-2015-7562 · Sos +3 · Sos +3

Name of the Vulnerable Software and Affected Versions: SoS versions 3.x Description: The issue allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by...

Microsoft Silverlight RCE Vulnerability

Microsoft Silverlight is a development platform from Microsoft. The platform can build interactive applications for the Web, desktop and mobile devices. A security vulnerability exists in Microsoft Silverlight, which arises from the program's failure to properly handle certain open and close...

Multiple F5 Products Privilege Acquisition Vulnerabilities

F5 BIG-IP LTM, etc. are products of F5 USA.LTM is a local traffic manager; APM is a set of solutions that provide secure and unified access to business-critical applications and networks. A security vulnerability exists in the iControl API of several F5 products. Because the...

Red Hat Automatic Bug Reporting Tool Privilege Gain Vulnerability

Red Hat Automatic Bug Reporting Tool ABRT is a set of automated bug detection and reporting tools from Red Hat Red Hat. A security vulnerability exists in the abrt-hook-ccpp help process in Red Hat ABRT versions prior to 2.7.1. A local attacker with certain privileges could exploit this...

TIBCO LogLogic Unity Information Disclosure Vulnerability

TIBCO LogLogic Unity is an acquisition by U.S.-based infrastructure software provider TIBCO to deliver the industry's leading scalable logging and security management platform specifically designed for the enterprise and cloud. An information disclosure vulnerability exists in versions of TIBCO...

Android Denial of Service Vulnerability (CNVD-2015-07341)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A denial-of-service vulnerability exists in version 5.x prior to Android 5.1.1 LMY48X. It allows an attacker to launch a denial-of-service attack and gain privileges via ...

Apple watchOS denial of service vulnerability (CNVD-2015-06753)

Apple watchOS is a smartwatch operating system developed by Apple. A denial of service vulnerability exists in Apple watchOS that allows local users to gain privileges or cause a denial of service via unspecified vectors...

Apple watchOS Denial of Service Vulnerability (CNVD-2015-06755)

Apple watchOS is a smartwatch operating system developed by Apple. A denial of service vulnerability exists in Apple watchOS before 2, which allows local users to gain privileges or cause a denial of service via unspecified vectors...

KLA10674 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improper information...

Python Untrusted Search Path Vulnerability

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. An untrusted search path vulnerability exists in the python.exe file in Python 3.5.0 and earlier versions...

DEBIAN-CVE-2015-5950

The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privilege...

UBUNTU-CVE-2015-1338

kernelcrashdump in Apport before 2.19 allows local users to cause a denial of service disk consumption or possibly gain privileges via a 1 symlink or 2 hard link attack on /var/crash/vmcore.log...

libvdpau Directory Traversal Vulnerability

libvdpau is a Unix-like system video decoding and presentation API interface VDAPU Video Decode and Presentation API for Unix in the open source library files. A directory traversal vulnerability exists in versions of libvdpau prior to 1.1.1, which allows local users to gain privileges via the...