64 matches found
SUSE Supportutils Input Validation Error Vulnerability
SUSE Supportutils is a collection of utility programs used in SUSE Linux systems from SUSE Germany. The product has the ability to collect system troubleshooting information, read and interpret the basic-health-check.txt file, and perform a brief analysis of the kernel core files. An input...
Design/Logic Flaw
An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently terminate processes, because mouseevent is not properly considered...
CVE-2018-10962
An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently terminate processes, because mouseevent is not properly considered...
CVE-2018-10962
An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently terminate processes, because mouseevent is not properly considered...
CVE-2018-10962
An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently terminate processes, because mouseevent is not properly considered...
PT-2018-10211
Name of the Vulnerable Software and Affected Versions Shanghai 2345 Security Guard version 3.7.0 Description An issue was discovered that allows local users to bypass intended process protections and terminate processes. This is because the mouse event is not properly considered, affecting the...
PT-2018-10062
Name of the Vulnerable Software and Affected Versions Shanghai 2345 Security Guard version 3.7.0 Description An issue was discovered that allows local users to bypass intended process protections and terminate processes because the WM CLOSE message is not properly considered. This affects the...
PT-2018-9878
Name of the Vulnerable Software and Affected Versions: Shanghai 2345 Security Guard version 3.7.0 Description: An issue was discovered that allows local users to bypass intended process protections and terminate processes because SetParent is not properly considered. This affects the...
Gentoo net-im/jabberd2 elevation of privilege vulnerability
The Gentoo net-im/jabberd2 package is an XMPP Extensible Message Processing Field Protocol package from the Gentoo Foundation. A security vulnerability exists in the Gentoo net-im/jabberd2 package version 2.6.1 and earlier. A local attacker can exploit the vulnerability to terminate arbitrary...
Bareos Privilege Permission and Access Control Vulnerabilities
Bareos is a set of open source data protection software from the German company Bareos. bareos-dir, bareos-fd and bareos-sd are among the core programs. A privilege permission and access control vulnerability exists in bareos-dir, bareos-fd, and bareos-sd in Bareos 16.2.6 and earlier versions,...
P3Scan Design Vulnerabilities
P3Scan is a proxy server for email that scans for worms, Trojans and other malicious emails. A security vulnerability exists in daemon in P3Scan 3.0rc1 and earlier versions, which stems from the creation of the p3scan.pid file after the program has downgraded an account to non-root privileges. A...
PT-2017-17800
Name of the Vulnerable Software and Affected Versions Red Hat rhnsd affected versions not specified Description A security issue was discovered where rhnsd PID files are created with world-writable permissions, allowing local attackers to fill disks or terminate selected processes. Recommendation...
MIMEDefang Elevation of Privilege Vulnerability
MIMEDefang is a high performance email filtering system. A security vulnerability exists in MIMEDefang 2.80 and earlier versions, which stems from the program creating a PID file after removing account privileges. A local attacker can exploit the vulnerability to terminate arbitrary processes...
Nagios Core Denial of Service Vulnerability
Nagios Core is an open source, free network monitoring tool. A denial of service vulnerability exists in Nagios Core versions prior to 4.3.3. A local attacker can exploit the vulnerability to terminate arbitrary processes...
UnrealIRCd Local Elevation of Privilege Vulnerability
UnrealIRCd is an open source IRC server developed by the UnrealIRCd project team. A security vulnerability exists in UnrealIRCd 4.0.13 and earlier versions. A local attacker can exploit the vulnerability to terminate arbitrary processes...
Tinyproxy main.c File Denial of Service Vulnerability
Tinyproxy is a small HTTP proxy program available for Windows, Linux and Unix systems. A security vulnerability exists in the main.c file in Tinyproxy 1.8.4 and earlier versions. A local attacker can exploit this vulnerability to terminate arbitrary processes...
CVE-2016-8344
An issue was discovered in Honeywell Experion Process Knowledge System PKS platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400, Experion PKS, Release 410, Experion PKS, Release 430, and Experion PKS, Release 431. Experion PKS does not properly validate input. By sending a...
CVE-2016-5248
The StopProxy command in LSC.Services.SystemService in Lenovo Solution Center before 3.3.003 allows local users to terminate arbitrary processes via the PID argument...