CVE-2019-2191

In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead to local information disclosure via USB with User execution privileges needed. User interaction is not required for exploitation.Product: AndroidVersions:...

CVE-2019-2190

In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead to local information disclosure via USB with User execution privileges needed. User interaction is not required for exploitation.Product: AndroidVersions:...

Out-of-bounds

In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead to local information disclosure via USB with User execution privileges needed. User interaction is not required for exploitation.Product: AndroidVersions:...

CVE-2019-1586 Cisco Application Policy Infrastructure Controller Recoverable Encryption Key Vulnerability

A vulnerability in Cisco Application Policy Infrastructure Controller APIC Software could allow an unauthenticated, local attacker with physical access to obtain sensitive information from an affected device. The vulnerability is due to insecure removal of cleartext encryption keys stored on loca...

CVE-2009-5151

The CVE-2009-5151 entry concerns the Absolute Computrace Agent, specifically its stub component in V70.785. The vulnerability enables code execution from a disk inter-partition space without requiring a digital signature, allowing a local privileged attacker to influence BIOS behavior and maintai...

Microsoft Windows FAT32 Disk Partition Driver Privilege Escalation Vulnerability (2998579)

This host is missing an important security update according to Microsoft Bulletin MS14-063. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows FAT32 Disk Partition Driver CVE-2014-4115 Local Privilege Escalation Vulnerability

Description Microsoft Windows FAT32 Disk Partition Driver is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will result in the complete compromise of affected computers...

USN-1168-1: Linux kernel vulnerabilities

Timo Warns discovered that the LDM disk partition handling code did not correctly handle certain values. By inserting a specially crafted disk device, a local attacker could exploit this to gain root privileges. CVE-2011-1017 Neil Horman discovered that NFSv4 did not correctly handle certain orde...

Ubuntu 11.04 : linux vulnerabilities (USN-1167-1)

Aristide Fattori and Roberto Paleari reported a flaw in the Linux kernel's handling of IPv4 icmp packets. A remote user could exploit this to cause a denial of service. CVE-2011-1927 Goldwyn Rodrigues discovered that the OCFS2 filesystem did not correctly clear memory when writing certain file...

USN-1162-1: Linux kernel vulnerabilities (Marvell Dove)

Brad Spengler discovered that the kernel did not correctly account for userspace memory allocations during exec calls. A local attacker could exploit this to consume all system memory, leading to a denial of service. CVE-2010-4243 Alexander Duyck discovered that the Intel Gigabit Ethernet driver...

Ubuntu 6.06 LTS : linux-source-2.6.15 vulnerabilities (USN-1111-1)

Dan Rosenberg discovered multiple flaws in the X.25 facilities parsing. If a system was using X.25, a remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2010-4164 Vegard Nossum discovered that memory garbage collection was not handled correctly for active...

USN-1146-1: Linux kernel vulnerabilities

Kees Cook discovered that some ethtool functions did not correctly clear heap memory. A local attacker with CAPNETADMIN privileges could exploit this to read portions of kernel heap memory, leading to a loss of privacy. CVE-2010-4655 Kees Cook discovered that the IOWarrior USB device driver did n...

Ubuntu Update for linux-source-2.6.15 USN-1111-1

Ubuntu Update for Linux kernel vulnerabilities USN-1111-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11111.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-source-2.6.15 USN-1111-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

[USN-1111-1] Linux kernel vulnerabilities

========================================================================== Ubuntu Security Notice USN-1111-1 May 05, 2011 linux-source-2.6.15 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its...

kernel security update

CentOS Errata and Security Advisory CESA-2011:0429 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scorin...

CVE-2001-0624

QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos...

CVE-2001-0624

CVE-2001-0624 affects QNX 2.4. A local user can read arbitrary files by directly accessing the FAT disk partition mount point, e.g., /fs-dos. The root cause is an unprotected mount point that exposes file contents to a local user. The impact is partial confidentiality of files. No remediation or ...

CVE-2001-0421

FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD command, which could release sensitive information such as shadowed...

sendmail.8.9.1.DoS.txt

Date: Thu, 1 Apr 1999 14:00:16 +0000 From: Lukasz Luzar To: [email protected] Subject: Possible local DoS in sendmail Hi, It seems that sendmail ran with -t option does NOT block SIGINT ... In that moment while we are sending data to its stdin, when we will press CTRL-C process is being killed...