Microsoft Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Kernel is one of the kernels. An elevation of privilege vulnerability exists in the Kernel in Microsoft Windows. A local attacker can exploit this vulnerability with a specially crafted application to...

CVE-2017-4057

Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to gain elevated privileges via the GUI or GUI terminal commands...

Microsoft SharePoint Server Cross-Site Scripting Vulnerability (CNVD-2017-22663)

Microsoft SharePoint Enterprise Server is a portal site that enables organizations to develop intelligent portal sites that seamlessly connect to users. A security vulnerability in Microsoft SharePoint Enterprise Server's filtering of incoming malicious web requests allows an attacker to exploit...

Multiple vulnerabilities in Google Android Qualcomm components (CNVD-2017-14394)

Android is a free and open-source Linux-based operating system used primarily on mobile devices. Multiple vulnerabilities exist in the Google Android Qualcomm component. An attacker can exploit the vulnerabilities to obtain sensitive information and execute arbitrary code with elevated privileges...

Multiple vulnerabilities in Google Android Qualcomm components (CNVD-2017-14376)

Android is a free and open-source Linux-based operating system used primarily on mobile devices. Multiple vulnerabilities exist in the Google Android Qualcomm component. An attacker can exploit the vulnerabilities to obtain sensitive information and execute arbitrary code with elevated privileges...

Microsoft Windows Kernel 'Win32k.sys' CVE-2017-8580 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges. Failed exploit attempts may result in a denial of service condition; this can result in the attacker gaining complete contro...

Microsoft Exchange Server CVE-2017-8559 Remote Privilege Escalation Vulnerability

Description Microsoft Exchange Server is prone to a remote privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Exchange Server 2013 Cumulative Update 16 Microsoft Exchange Server 2013 SP1 Microsoft Exchange Server 2016...

Microsoft Windows Kernel 'Win32k.sys' CVE-2017-8578 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges. Failed exploit attempts may result in a denial of service condition; this can result in the attacker gaining complete contro...

Microsoft Windows Kernel CVE-2017-8561 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based...

Microsoft Windows Graphics Component CVE-2017-8574 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

Schneider Electric Pelco VideoXpert Privilege Escalations

Summary VideoXpert is a video management solution designed for scalability, fitting the needs surveillance operations of any size. VideoXpert Ultimate can also aggregate other VideoXpert systems, tying multiple video management systems into a single interface. Description The application is...

CVE-2017-6712

A vulnerability in certain commands of Cisco Elastic Services Controller could allow an authenticated, remote attacker to elevate privileges to root and run dangerous commands on the server. The vulnerability occurs because a "tomcat" user on the system can run certain shell commands, allowing th...

[slackware-security] Slackware 14.0 kernel

New kernel packages are available for Slackware 14.0 to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/linux-3.2.90/: Upgraded. This kernel fixes security issues including "Stack Clash". The issues may result in denial-of-service conditions or may...

Citrix XenServer Multiple Vulnerabilities (CTX224740)

The version of Citrix XenServer installed on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities : - A flaw exists that causes grant table operations to fail due to improper handling of reference counts. An unauthenticated, remote attacker can...

Google Android Qualcomm Video Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm Video driver is a video driver developed by Qualcomm. The Qualcomm Video driver in Android is vulnerable to a boost vulnerability. An attacker can exploit this vulnerability ...

Command injection

In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, an unauthenticated remote attacker may be able to elevate their permissions to root through a command injection. This may potentially be exploited by an attacker to run arbitrary code with...

Google Android Qualcomm elevation of privilege vulnerability (CNVD-2017-11362)

Google Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Consortium. Google Android Qualcomm has a security vulnerability that allows remote attackers to exploit the vulnerability to submit special requests for elevated privileges...

Google Android Qualcomm elevation of privilege vulnerability (CNVD-2017-10808)

Google Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Consortium. Google Android Qualcomm has a security vulnerability that allows remote attackers to exploit the vulnerability to submit special requests for elevated privileges...

Google Android Qualcomm elevation of privilege vulnerability (CNVD-2017-10806)

Google Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Consortium. Google Android Qualcomm has a security vulnerability that allows remote attackers to exploit the vulnerability to submit special requests for elevated privileges...

Google Android Qualcomm elevation of privilege vulnerability (CNVD-2017-11367)

Google Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Consortium. Google Android Qualcomm has a security vulnerability that allows remote attackers to exploit the vulnerability to submit special requests for elevated privileges...