5631 matches found
CVE-2016-10395
In FlexNet Publisher versions before Luton SP1 11.14.1.1 running FlexNet Publisher Licensing Service on Windows platform, a boundary error related to a named pipe within the FlexNet Publisher Licensing Service can be exploited to cause an out-of-bounds memory read access and subsequently execute...
CVE-2016-10395
In FlexNet Publisher versions before Luton SP1 11.14.1.1 running FlexNet Publisher Licensing Service on Windows platform, a boundary error related to a named pipe within the FlexNet Publisher Licensing Service can be exploited to cause an out-of-bounds memory read access and subsequently execute...
CVE-2017-6638
A vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and run an executable file with privileges equivalent to the Microsoft Windows SYSTEM account. The vulnerability is due to incomplete input...
About the security content of macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
Net Monitor for Employees Pro < 5.3.4 - Unquoted Service Path Privilege Escalation Vulnerability
Exploit for windows platform in category local exploits Exploit Title: Unquoted Service Path Privilege Escalation - Net Monitor for Employees Pro gmail.com, saeid Nsecurity.org Linkedin: https://www.linkedin.com/in/saeidatabaki Vendor Homepage: http://networklookout.com/ Version: sc qc "Net Monit...
Directory traversal
Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary files via unspecified parameters to 1 upload/updateDriver or 2 upload/addDriver or to execute arbitrary code with SYSTEM privileges via unspecified parameters to 3...
Huawei Y6 Pro graphics driver memory leak vulnerability
Huawei Y6 Pro is a smartphone from Chinese company Huawei Huawei. A memory leak vulnerability exists in the graphics driver of Huawei Y6 Pro phones using the MTK platform. Due to insufficient input checksum, an attacker induces a user to install a malicious application that has gained system...
CVE-2016-1876
The backend service process in Lenovo Solution Center aka LSC before 3.3.0002 allows local users to gain SYSTEM privileges via unspecified vectors...
McAfee Security Scan Plus < 3.11.474.2 Multiple Vulnerabilities (TS102593 / TS102614)
The version of McAfee Security Scan Plus installed on the remote Windows host is prior to 3.11.474.2. It is, therefore, affected by multiple vulnerabilities : - A privilege escalation vulnerability exists in McUICnt.exe due to certain DLL files being loaded from the same directory as signed...
ManageEngine Applications Manager MenuHandlerServlet SQL Injection (CVE-2016-9488)
An SQL injection vulnerability exists in ManageEngine Applications Manager. This vulnerability is due to insufficient validation of the configid parameter when processing requests sent to MenuHandlerServlet servlet. By sending crafted request messages, a remote unauthenticated attacker can exploi...
Serviio PRO 1.8 DLNA Media Streaming Server REST API Arbitrary Code Execution Exploit
Serviio PRO DLNA Media Streaming Server version 1.8.0.0 PRO, 1.7.1, 1.7.0, and 1.6.1 suffers from a REST API arbitrary code execution vulnerability. !/usr/bin/env python Serviio PRO 1.8 DLNA Media Streaming Server REST API Arbitrary Code Execution Vendor: Petr Nejedly | Six Lines Ltd Product web...
CVE-2017-5689
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology AMT and Intel Standard Manageability ISM. An unprivileged local attacker could provision manageability features gaining unprivileged network or local system...
CVE-2017-5689
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology AMT and Intel Standard Manageability ISM. An unprivileged local attacker could provision manageability features gaining unprivileged network or local system...
F5 Networks BIG-IP : Linux kernel vulnerability (K68852819)
Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service use-after-free by making multiple bind system calls without properly ascertaining whether a socket has the SOCKZAPPED status, related to...
Windows DCE-RPC MIBEntryGet vulnerability (ErraticGopher)
Added: 04/28/2017 Background Distributed Computing Environment - Remote Procedure Call DCE-RPC is the protocol used by Windows operating systems for calling program functions on remote targets. Problem A memory corruption vulnerability in the DCE-RPC MIBEntryGet call could allow remote attackers ...
Windows DCE-RPC MIBEntryGet vulnerability (ErraticGopher)
Added: 04/28/2017 Background Distributed Computing Environment - Remote Procedure Call DCE-RPC is the protocol used by Windows operating systems for calling program functions on remote targets. Problem A memory corruption vulnerability in the DCE-RPC MIBEntryGet call could allow remote attackers ...
Windows DCE-RPC MIBEntryGet vulnerability (ErraticGopher)
Added: 04/28/2017 Background Distributed Computing Environment - Remote Procedure Call DCE-RPC is the protocol used by Windows operating systems for calling program functions on remote targets. Problem A memory corruption vulnerability in the DCE-RPC MIBEntryGet call could allow remote attackers ...
Dolby DAX2 and DAX3 power-up vulnerability
Dolby DAX2 and DAX3 are industry standard software programs developed by Dolby Laboratories for a wide range of vendors. A privilege extraction vulnerability exists in the Dolby DAX2 versions 1.0,1.0.1,1.1,1.1.1,1.2,1.3,1.3.1,1.3.2,1.4,1.4.1,1.4.2,1.4.3,1.4.4 and DAX3 versions 1.0 and 1.1 API...
Huawei Mate 9 camerafs driver buffer overflow vulnerability
Huawei Mate9 is a smartphone from Chinese company Huawei huawei. A buffer overflow vulnerability exists in the Huawei Mate 9 camerafs driver. Due to the lack of parameter checking, an attacker induces a user to install a malicious application that has gained system privileges on Android, and the...
Icecream v4.53 & Pro - File Permission Privilege Escalation
Document Title: =============== Icecream v4.53 & Pro - File Permission Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2058 Release Date: ============= 2017-04-26 Vulnerability Laboratory ID VL-ID: ==================================...