DEBIAN-CVE-2017-8849

smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service...

USN-3286-1: KDE-Libs vulnerability

Sebastian Krahmer discovered that the KDE-Libs Kauth component incorrectly checked services invoking D-Bus. A local attacker could use this issue to gain root privileges...

USN-3286-1 kde4libs vulnerability

Sebastian Krahmer discovered that the KDE-Libs Kauth component incorrectly checked services invoking D-Bus. A local attacker could use this issue to gain root privileges...

Ubuntu: Security Advisory (USN-3286-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tootsie Bus Android app suffers from a cracked sign signature algorithm leading to arbitrary phone number login vulnerability

Tuk Tuk Bus is a bus shuttle customization mobile service platform for people who have the same travel needs. The Tuk Tuk Bus Android app suffers from a cracked sign signature algorithm leading to an arbitrary cell phone number login vulnerability. An attacker can exploit this vulnerability to lo...

UBUNTU-CVE-2017-8925

The omninetopen function in drivers/usb/serial/omninet.c in the Linux kernel before 4.10.4 allows local users to cause a denial of service tty exhaustion by leveraging reference count mishandling...

Google Android kernel UVC driver information disclosure vulnerability

Androidon Nexus5X, etc. are the United States Google Google and the Open Handheld Alliance OHA jointly developed a set of running in the Nexus5X smartphone and Linux-based open source operating system. kernel UVC Driver one of the kernel USB Video Capture Driver. An information disclosure...

CVE-2017-8422

A privilege escalation flaw was found in the way kdelibs handled D-Bus messages. A local user could potentially use this flaw to gain root privileges by spoofing a callerID and leveraging a privileged helper application...

Linux kernel denial of service vulnerability (CNVD-2017-07579)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the 'saa7164busget' function in the drivers/media/pci/saa7164/saa7164-bus.c file in Linux kernel 4.10.14 and earlier. A local...

DEBIAN-CVE-2017-8831

The saa7164busget function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.11.5 allows local users to cause a denial of service out-of-bounds array access or possibly have unspecified other impact by changing a certain sequence-number value, aka a "double fetch"...

UBUNTU-CVE-2017-8831

The saa7164busget function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.11.5 allows local users to cause a denial of service out-of-bounds array access or possibly have unspecified other impact by changing a certain sequence-number value, aka a "double fetch"...

The vulnerability of the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability in the driver/hid/hid-cp2112.c kernel of the Linux operating system exists due to improper cleaning or release of resources. Exploiting this vulnerability allows an attacker, operating locally, to trigger a service failure using unpredictable vectors, without considering that a...

Module to Probe Different Data Points in a CAN Packet

Scans between two CAN IDs and writes data at each byte position. It will either write a set byte value Default 0xFF or iterate through all possible values of that byte position takes much longer. Does not check for responses and is basically a simple blind fuzzer. This module requires Metasploit:...

EulerOS 2.0 SP1 : dbus (EulerOS-SA-2016-1037)

According to the versions of the dbus packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - D-BUS is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a...

CVE-2017-3507

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Console Design. Supported versions that are affected are 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HT...

CVE-2017-3507

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Console Design. Supported versions that are affected are 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HT...

Design/Logic Flaw

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Console Design. Supported versions that are affected are 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HT...

CVE-2017-3507

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Console Design. Supported versions that are affected are 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HT...

CVE-2017-3507

CVE-2017-3507 affects Oracle Fusion Middleware’s Oracle Service Bus (Web Console Design) up to version 12.2.1.2.0. The vulnerability allows an unauthenticated, network-accessing attacker over HTTP to compromise Oracle Service Bus by performing unauthorized updates/inserts/deletes and reads, poten...

CVE-2017-3507

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Console Design. Supported versions that are affected are 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HT...