Design/Logic Flaw

The 1 agpgenericallocpage and 2 agpgenericallocpages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensitive information by reading...

CVE-2009-1192

The 1 agpgenericallocpage and 2 agpgenericallocpages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensitive information by reading...

MDVA-2008:055 : xkeyboard-config

Mandriva Linux 2008.1 introduced an improved Finnish default keyboard layout called Kotoistus. This layout adds altgr-space as a key combination for non-breaking space. However, that key combination can be easily hit accidentally when a normal space was intended instead, especially after typing t...

Import Pages is not restricted to system admins

The Import pages actions is currently restricted to space admins not system admins like it should. Caused by CONF-10039...

Import Pages is not restricted to system admins

The Import pages actions is currently restricted to space admins not system admins like it should. Caused by CONF-10039...

Import Pages is not restricted to system admins

The Import pages actions is currently restricted to space admins not system admins like it should. Caused by CONF-10039...

Design/Logic Flaw

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space...

CVE-2009-1185

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space...

CVE-2009-0792

Multiple integer overflows in icc.c in the International Color Consortium ICC Format library aka icclib, as used in Ghostscript 8.64 and earlier and Argyll Color Management System CMS 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service heap-based buffer overflow and...

Partial space admin permission/authority

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-15172. panel I followed these guidelines, but this is not fine grained enough...

Partial space admin permission/authority

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-15172. panel I followed these guidelines, but this is not fine grained enough...

Partial space admin permission/authority

I followed these guidelines, but this is not fine grained enough. http://confluence.atlassian.com/display/DOC/Global+Permissions+OverviewGlobalPermissionsOverview-confluenceadmin We need to prevent space admin adding new permission to their space. We prefer to manage space permission by the...

Untrusted applet causes DoS by filling up disk space

Sun Java Runtime Environment JRE 1.5.06 and earlier, JDK 1.5.06 and earlier, and SDK 1.5.06 and earlier allows remote attackers to cause a denial of service disk consumption by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory...

Fedora Core 9 FEDORA-2009-3101 (seamonkey)

The remote host is missing an update to seamonkey announced via advisory FEDORA-2009-3101. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

CVE-2009-1235

XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space and the HFS IOCTL handler, which allows local users to overwrite kernel memory and gain privileges by attaching an HFS+ disk image and performing certain steps involving...

trim()vulnerability crack and protection+articles the whole story-vulnerability warning-the black bar safety net

With the following code: % dim name,title name=trimrequest. form"name" password=trimrequest. form"password" if name=""or password="" then response. redirect "error. asp? error=name&name=null" myDSN="DSN=test;uid=test;pwd=test" set cn=server. createobject"adodb. connection" cn. open myDSN...

Trend Micro Internet Security Pro 2009 Priviliege Escalation PoC

No description provided by source. Trend Micro Internet Security Pro 2009 tmactmon.sys Priviliege Escalation PoC. by b1@ckeYe The vulnerability is caused due to the IOCTL handler of the "tmactmon.sys" driver improperly processing user space parameters. This exploit execute arbitrary code in...

Fedora Core 10 FEDORA-2009-3011 (argyllcms)

The remote host is missing an update to argyllcms announced via advisory FEDORA-2009-3011. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Trend Micro Internet Security Pro 2009 Priviliege Escalation PoC

Exploit for unknown platform in category local exploits ================================================================ Trend Micro Internet Security Pro 2009 Priviliege Escalation PoC ================================================================ Trend Micro Internet Security Pro 2009...

Trend Micro Internet Security Pro 2009 - Priviliege Escalation

Trend Micro Internet Security Pro 2009 tmactmon.sys Priviliege Escalation PoC. by b1@ckeYe The vulnerability is caused due to the IOCTL handler of the "tmactmon.sys" driver improperly processing user space parameters. This exploit execute arbitrary code in kernel space via a specially crafted...