PT-2016-5029 · Red Hat · Red Hat Openshift Enterprise

Name of the Vulnerable Software and Affected Versions: Red Hat OpenShift Enterprise version 3.2 Description: The issue allows remote authenticated users to read log files from another namespace. This can be achieved by creating a new namespace with the same name as a previously deleted namespace...

Microsoft Windows Win32k Elevation of Privilege (MS16-062: CVE-2016-0174)

A use after free vulnerability exists in Microsoft Windows that could be abused by attackers to elevate privileges. The vulnerability is caused when a font object is referenced after being deleted. A remote attacker can exploit this vulnerability by running a specially crafted application...

Shopify: View all deleted comments and rating of any app .

Hi , Deleted comments and rating of any app can be viewed by following url - https://apps.shopify.com//reviews//edit for example review with review id 47935 is deleted but still can be view by following link - https://apps.shopify.com/swell/reviews/47935/edit As review id is incremental id so all...

UBUNTU-CVE-2016-0839

postproc/volumelistener.c in mediaserver in Android 6.x before 2016-04-01 mishandles deleted effect context, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 25753245...

Microsoft Internet Explorer Memory Corruption (MS16-037: CVE-2016-0159)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

Red Hat OpenShift Information Disclosure Vulnerability

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that builds, tests, deploys, and runs applications.OpenShift Enterprise is an open source version of the private cloud. A security vulnerability exists in Red Hat OpenShift Enterprise version 3.x that...

WebRTC and LibVPX vulnerabilities found through code inspection — Mozilla

Security researcher Ronald Crane reported five "moderate" rated vulnerabilities affecting released code that were found through code inspection. These included the following issues in WebRTC: an integer underflow, a missing status check, race condition, and a use of deleted pointers to create new...

Microsoft Internet Explorer Memory Corruption (MS16-023: CVE-2016-0114)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

VulnCheck KEV: CVE-2011-1255

The Timed Interactive Multimedia Extensions aka HTML+TIME implementation in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, aka...

Spotify (Playlists) #2 - Authentication Bypass Vulnerability

Document Title: =============== Spotify Playlists 2 - Authentication Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1663 Release Date: ============= 2016-01-18 Vulnerability Laboratory ID VL-ID: ====================================...

Revive Adserver Unauthorized Operation Vulnerability

Revive Adserver is an open source ad management system from the Revive Adserver team. A security vulnerability in Revive Adserver versions prior to 3.2.2 can be exploited by remote attackers to perform restricted operations with the help of unexpired sessions established by deleted or disconnecte...

Oracle: Security Advisory (ELSA-2008-0885)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tiger - The Unix security audit and intrusion detection tool

Tiger is a security tool that can be use both as a security audit and intrusion detection system. It supports multiple UNIX platforms and it is free and provided under a GPL license. Unlike other tools, Tiger needs only of POSIX tools and is written entirely in shell language. Tiger has some...

UBUNTU-CVE-2015-6727

The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" text...

CVE-2015-6727

The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" text...

Microsoft Office Memory Corruption (MS15-081: CVE-2015-2469)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in handling of an uninitialized or deleted object. A remote attacker can exploit this issue by enticing a victim to open a specially crafted office file...

kernel: panic while flushing nftables rules that reference deleted chains.

A flaw was found in the way the nftflushtable function of the Linux kernel's netfilter tables implementation flushed rules that were referencing deleted chains. A local user who has the CAPNETADMIN capability could use this flaw to crash the system...

kernel: panic while flushing nftables rules that reference deleted chains.

A flaw was found in the way the nftflushtable function of the Linux kernel's netfilter tables implementation flushed rules that were referencing deleted chains. A local user who has the CAPNETADMIN capability could use this flaw to crash the system...

kernel: panic while flushing nftables rules that reference deleted chains.

A flaw was found in the way the nftflushtable function of the Linux kernel's netfilter tables implementation flushed rules that were referencing deleted chains. A local user who has the CAPNETADMIN capability could use this flaw to crash the system...

openstack-glance: user storage quota bypass

A storage quota bypass flaw was found in OpenStack Image glance. If an image was deleted while it was being uploaded, it would not count towards a user's quota. A malicious user could use this flaw to deliberately fill the backing store, and cause a denial of service...