Dell Active Roles 7.x Unquoted Service Path Privilege Escalation Vulnerability

Dell Active Roles versions 7.1, 7.0.4, 7.0.3, 7.0.2, and 7.0 suffer from an unquoted service path privilege escalation vulnerability. Exploit Title: Dell Active Roles Unquoted Service Path Privilege Escalation Date: 16/06/2017 Exploit Author: SlidingWindow , Twitter: @KapilKhot Vendor Homepage:...

Dell Active Roles 7.x Unquoted Service Path Privilege Escalation

Exploit Title: Dell Active Roles Unquoted Service Path Privilege Escalation Date: 16/06/2017 Exploit Author: SlidingWindow , Twitter: @KapilKhot Vendor Homepage: https://www.oneidentity.com/products/active-roles/ Version: Dell Active Roles versions 7.1, 7.0.4, 7.0.3, 7.0.2, and 7.0 Tested on: Del...

CVE-2017-12337

CVE-2017-12337 affects Cisco Voice Operating System (Voice OS) upgrade mechanisms. A refresh upgrade (RU) or Prime Collaboration Deployment (PCD) migration can leave an engineering flag enabled after completion, potentially allowing an unauthenticated attacker to gain root access with a known pas...

Unauthorized Access Vulnerability in Multiple Cisco Products

Cisco Voice Operating System is a set of voice operating system of the United States Cisco Cisco.Cisco Unified Communications Manager UCM and so on are based on the Cisco Voice Operating System platform products.Cisco Unified Communications Manager UCM is a call processing component of the unifie...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-36629)

Microsoft Edge is a popular browser. A remote memory corruption vulnerability exists in the Microsoft Edge scripting engine, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by the user with elevated privileges...

Adobe Photoshop CC Multiple Remote Code Execution Vulnerabilities (APSB17-34) - Windows

Adobe Photoshop CC is prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-36630)

Microsoft Edge is a popular browser. A remote memory corruption vulnerability exists in the Microsoft Edge scripting engine, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by the user with elevated privileges...

Cisco Voice Operating System-Based Products Unauthorized Access Vulnerability

A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker to gain unauthorized, elevated access to an affected device. The vulnerability occurs when a refresh upgrade or Prim...

PT-2017-16160 · Blackberry · Qnx Sdp

Name of the Vulnerable Software and Affected Versions: BlackBerry QNX Software Development Platform SDP version 6.6.0 Description: The issue is related to an elevation of privilege vulnerability in the default configuration of the QNX SDP with QNet enabled. This could allow an attacker to access...

The vulnerability of the class verifier in the IBM J9 VM allows a hacker to disable the security controller and increase their privileges.

The vulnerability of the class verifier in the IBM J9 VM is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disable the security controller and gain increased privileges...

PHP < 5.6.32, 7.x < 7.0.24, 7.1.x < 7.1.11 Heap Based Buffer Overflow Vulnerability - Linux

PHP is prone to a heap buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

Symantec Endpoint Protection Privilege Escalation Vulnerability (SYM17-011)

Symantec Endpoint Protection is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Google Android Media Framework Remote Code Execution Vulnerability (CNVD-2017-36350)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media Framework is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in Media Framework in Android. A remote attacker can exploit...

Google Android Media Framework Remote Code Execution Vulnerability (CNVD-2017-35661)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media Framework is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in Media Framework in Android. A remote attacker can exploit...

Google Android Media Framework Remote Code Execution Vulnerability (CNVD-2017-35659)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media Framework is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in Media Framework in Android. A remote attacker could exploi...

Google Android Media Framework Remote Code Execution Vulnerability (CNVD-2017-36349)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media Framework is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in Media Framework in Android. A remote attacker can exploit...

Google Android NVIDIA Component Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the NVIDIA GPU driver is an NVIDIA graphics processor driver component used in it. The NVIDIA GPU driver in Android is vulnerable to a power lifting vulnerability. A remote...

CVE-2017-12261

A vulnerability in the restricted shell of the Cisco Identity Services Engine ISE that is accessible via SSH could allow an authenticated, local attacker to run arbitrary CLI commands with elevated privileges. The vulnerability is due to incomplete input validation of the user input for CLI...

CVE-2017-12261

A vulnerability in the restricted shell of the Cisco Identity Services Engine ISE that is accessible via SSH could allow an authenticated, local attacker to run arbitrary CLI commands with elevated privileges. The vulnerability is due to incomplete input validation of the user input for CLI...

CVE-2017-12261

The CVE-2017-12261 issue is a vulnerability in the restricted shell of Cisco Identity Services Engine (ISE) that allows an authenticated, local attacker to run arbitrary CLI commands with elevated privileges due to incomplete input validation of CLI inputs. It affects ISE products released in 1.4...