1969 matches found
Pivotal GemFire for PCF Remote Privilege Elevation Vulnerability
Pivotal Software GemFire for PCF is a high-performance, scalable, in-memory distributed database for PCF from Pivotal Software, USA. A remote elevation of privilege vulnerability exists in Pivotal Software GemFire for PCF version 1.6.x prior to 1.6.5 and version 1.7.x prior to 1.7.1. A remote...
Debian DSA-3740-1 : samba - security update
Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2016-2119 Stefan Metzmacher discovered that client-side SMB2/3 required signing can be downgraded,...
CVE-2016-2123
A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndrpulldnspname contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndrpulldnspname parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute ov...
[SECURITY] [DSA 3740-1] samba security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3740-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 19, 2016 https://www.debian.org/security/faq -...
CVE-2016-2123
A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndrpulldnspname contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndrpulldnspname parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute ov...
Samba NDR Parsing ndr_pull_dnsp_name Heap-based Buffer
Description The Samba routine ndrpulldnspname contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndrpulldnspname parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory...
Joomla! Core Remote Privilege Escalation Vulnerability (CVE-2016-9838)
Author: p0wd3r know Chong Yu 404 security lab Date: 2016-12-21 0x00 vulnerability overview 1. Vulnerability description Joomla to 12, on 13, released 3. 6. 5 of the upgrade announcement, the upgrade fixes three security vulnerabilities, wherein the CVE-2016-9838 been officially designated as high...
ALPINE-CVE-2016-7944
Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INTMAX, which triggers the client to stop reading data and get out of sync...
CVE-2016-7944
Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INTMAX, which triggers the client to stop reading data and get out of sync...
DEBIAN-CVE-2016-7944
Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INTMAX, which triggers the client to stop reading data and get out of sync...
HP ThinkPwn UEFI BIOS 'SmmRuntime' Remote Privilege Elevation Vulnerability
HP ThinkPwn UEFI BIOS is a device from Hewlett-Packard HP in the United States. The HP ThinkPwn UEFI BIOS 'SmmRuntime' suffers from a remote elevation of privilege vulnerability that can be exploited by an attacker to execute arbitrary code with elevated privileges and perform unauthorized...
Firejail Remote Elevation of Privilege Vulnerability
Firejail is a suite of SUID programs written in C that reduces the risk of security vulnerabilities by restricting the runtime environment of untrusted applications using the Linux namespace and seccomp-bpf. A security vulnerability exists in Firejail that allows a remote attacker to exploit the...
CVE-2016-3388
Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3387...
VMware vRealize Operations Remote Elevation of Privilege Vulnerability
VMware vRealize Operations is a set of policy-based, automated, intelligent IT operations and management software from VMware, Inc. A remote elevation of privilege vulnerability exists in VMware vRealize Operations. A remote attacker could exploit this vulnerability to gain full control of an...
Microsoft Windows Graphics CVE-2016-7182 Remote Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the kernel privileges. Technologies Affected Microsoft Live Meeting 2007 Console Microsoft Lync 2010 32-bit Microsoft Lync 2010...
Microsoft Internet Explorer and Edge CVE-2016-3387 Remote Privilege Escalation Vulnerability
Description Microsoft Internet Explorer and Edge are prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsoft Edge Microsoft Internet Explorer 10 Microsoft...
Red Hat policycoreutils Remote Elevation of Privilege Vulnerability
policycoreutils is a Red Hat Red Hat for SELinux systems in the core policy toolkit. A remote elevation of privilege vulnerability exists in policycoreutils, which can be exploited by remote attackers to gain elevation of privilege...
Microsoft Internet Explorer CVE-2016-3292 Remote Privilege Escalation Vulnerability
Description Microsoft Internet Explorer is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Internet Explorer 10 and 11 are vulnerable. Technologies Affected Microsoft Internet...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the drivers/video/msm/vidc/common/enc/venc.c file in Qualcomm’s Android operating system is related to the lack of checking for the ioctl VENIOCTLGETSEQUENCEHDR call. Exploiting this vulnerability allows a remote attacker to increase their privileges through a specially creat...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the drivers/misc/qseecom.c file in Qualcomm’s Android operating system is related to the lack of checks for ioctl calls. Exploiting this vulnerability allows a remote attacker to increase their privileges through a specially created application...