Corega CG-WLR300GNV and CG-WLR300GNV-W Privilege Gain Vulnerabilities

The Corega CG-WLR300GNV and CG-WLR300GNV-W are both wireless LAN routers from Corega Japan. A privilege acquisition vulnerability exists in the Corega CG-WLR300GNV and CG-WLR300GNV-W that stems from the program failing to limit the number of authentication requests. An attacker within wireless...

CVE-2016-3221

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

CVE-2016-3231

The CVE-2016-3231 issue affects the Windows Diagnostics Hub Standard Collector Service, where improper handling of the agent DLL path enables local privilege escalation via arbitrary DLL loading. The root cause is unsafe library loading due to not properly sanitizing the input path, allowing an a...

IBM TRIRIGA Application Platform Privilege Vulnerability

The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...

Android Qualcomm Sound Driver Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Sound Driver is a Qualcomm-developed sound driver used in it. A power lifting vulnerability exists in the Qualcomm Sound Driver for Android. An attacker can exploit this...

Android Qualcomm Camera Driver Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm Camera Driver is a camera driver developed by Qualcomm. A power lifting vulnerability exists in the Qualcomm Camera Driver for Android. A local attacker can exploit...

CVE-2016-0178

The RPC NDR Engine in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles free operations, which allows remote attackers to execute arbitrary code via malformed RPC...

CVE-2016-0174

CVE-2016-0174 describes a local privilege escalation in Windows kernel-mode drivers (Win32k) affecting multiple Windows family versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, and Windows 10 1511/Gold). The vulnerability allows a locally authenticated attacker to gain hig...

Android Mediaserver Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A privilege escalation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker with the help of a...

Android Wi-Fi power lifting vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, with Wi-Fi as one of the wireless connectivity components. A privilege vulnerability exists in Android's Wi-Fi, which can be exploited by a local attacker with the help of a...

Android Qualcomm Buspm Driver Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA.Qualcomm Buspm Driver is one of the Qualcomm Buspm drivers. A boost vulnerability exists in Android's Qualcomm Buspm Driver, which can be exploited by a local attacker to execute arbitrary...

[SECURITY] [DSA 3569-1] openafs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3569-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 05, 2016 https://www.debian.org/security/faq -...

CVE-2016-0167

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

CVE-2016-0167

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka “Win32k Elevation of Privilege...

Cogent Real-Time Systems Cogent DataHub Privilege Vulnerability

Cogent Real-Time Systems Cogent DataHub is a suite of real-time data solutions from Cogent Real-Time Systems, a Canadian company, which is part of the SCADA System for Data Acquisition and Supervisory Control and Automation software. A boost vulnerability exists in Cogent Real-Time Systems Cogent...

HP System Management Homepage Privilege Control Vulnerability

HP System Management Homepage is a Web-based interface published by HP. A security vulnerability in HP System Management Homepage allows remote attackers to exploit the vulnerability by submitting a special request to take control of the system...

SUSE-SU-2016:0755-1 Security update for kernel live patch 1

This kernel live patch for Linux Kernel 3.12.51-60.20.2 fixes three security issues: Fixes: - CVE-2016-0728: A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962078. - CVE-2015-8660: The ovlsetattr function in fs/overlayfs/inode.c...

CVE-2016-0093

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

CVE-2016-0095

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

Ubuntu Linux Local Elevation of Privilege Vulnerability

Ubuntu is a GNU/Linux operating system developed by Canonical and the Ubuntu Foundation for desktop applications. A local elevation of privilege vulnerability exists in Ubuntu Linux. A local attacker can exploit this vulnerability to gain elevated privileges...