5207 matches found
MS15-101: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: September 8, 2015
MS15-101: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: September 8, 2015 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework that could all...
MS15-101: Description of the security update for the .NET Framework 4 on Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: September 8, 2015
MS15-101: Description of the security update for the .NET Framework 4 on Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: September 8, 2015 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework that could...
MS13-052: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: July 9, 2013
MS13-052: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: July 9, 2013 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could allow elevation of privilege on a...
Description of the security update for the .NET Framework 4.5.1 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: December 10, 2013
Description of the security update for the .NET Framework 4.5.1 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: December 10, 2013 September 9, 2014 This security update has been re-released and contains updated files. We recommend that you apply this updated security update. View...
Google Android NVIDIA GPU Driver Privilege Elevation Vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android NVIDIA GPU Driver, which can be exploited by an attacker to execute arbitrary code with elevated privileges in...
e107 CMS is less than or equal to 2. 1. 2 elevation of privilege vulnerability analysis-vulnerability warning-the black bar safety net
0x00 vulnerability background e107 CMS is a based on PHP, Bootstrap, Mysql, web site content management system, can be widely used for personal blogs, enterprise built station, in the global range more widely. 0x01 vulnerability affects version version 0x02 vulnerability analysis of the environme...
CVE-2016-8425
An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...
USN-3146-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry
USN-3146-2: Linux kernel Xenial HWE vulnerabilities Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 LTS Description It was discovered that the getuserasmex implementation in the Linux kernel for x86/x8664 contained extended asm statements that were incompatible with the...
Huawei畅享5手机MTK平台存在输入校验漏洞(CNVD-2016-12841)
Huawei Think 5 is a smartphone from the Chinese company Huawei Huawei. An input validation vulnerability exists in the MTK platform of the Huawei Changsha 5 phone. An attacker may trick the user into installing a malicious application, which can exploit the vulnerability to send specific paramete...
Xen elevation of privilege vulnerability (CNVD-2016-12848)
Xen is an open source virtual machine monitor product developed by the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen suffers from an elevation of...
SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:3188-1)
The SUSE Linux Enterprise 12 SP 2 kernel was updated to fix two security issues. The following security bugs were fixed : - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg or /dev/bsg to elevate their privileges bsc1013604. -...
Huawei cellular Wi-Fi driver suffers from input checksum vulnerability
Huawei Think 5 is a smartphone from the Chinese company Huawei Huawei. An input validation vulnerability exists in the Huawei Think 5 cellular Wi-Fi driver. An attacker could trick users into installing a malicious application, which could exploit the vulnerability to send specific parameters to...
CVE-2016-2126
Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC Privilege Attribute Certificate checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the...
Flaws in Kerberos PAC validation can trigger privilege elevation.
Description The winbindd part of Samba offers verification and unpacking of the PAC Privilege Attribute Certificate received via Kerberos. When parsing the PAC, winbindd may write beyond the allocated buffer, however the data involved is from the server private key and so not user-controlled...
Elevation of Privilege Vulnerability in the background of emlog personal blog system
Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A privilege elevation vulnerability exists in the background /src/admin/data.php page of the emlog personal blog system. An attacker can exploit the vulnerability to elevate privileges by importing files...
Elevation of Privilege Vulnerability in Power Management Component of Multiple Apple Products
Apple iOS, macOS, and tvOS are all products of Apple Inc. Apple iOS is an operating system developed for mobile devices; macOS is an operating system developed for Mac computers. power Management is one of the power management components. A security vulnerability exists in the Power Management...
SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:3146-1)
The SUSE Linux Enterprise 12 SP 2 kernel was updated to fix two security issues. The following security bugs were fixed : - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg or /dev/bsg to elevate their privileges bsc1013604. -...
Microsoft Windows Secure Kernel Mode Privilege Elevation Vulnerability (3205642)
This host is missing an important security update according to Microsoft Bulletin MS16-150. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...