Serviio PRO 1.8 DLNA Media Streaming Server Local Privilege Escalation

Serviio PRO DLNA Media Streaming Server version 1.8.0.0 PRO suffers from a local privilege escalation vulnerability. Serviio PRO 1.8 DLNA Media Streaming Server Local Privilege Escalation Vendor: Petr Nejedly | Six Lines Ltd Product web page: http://www.serviio.org Affected version: 1.8.0.0 PRO...

Serviio PRO 1.8 DLNA Media Streaming Server Local Privilege Escalation

Summary Serviio is a free media server. It allows you to stream your media files music, video or images to renderer devices e.g. a TV set, Bluray player, games console or mobile phone on your connected home network. Description The application suffers from an unquoted search path issue impacting...

Serviio PRO 1.8 DLNA Media Streaming Server - Local Privilege Escalation

Serviio PRO 1.8 DLNA Media Streaming Server Local Privilege Escalation Vendor: Petr Nejedly | Six Lines Ltd Product web page: http://www.serviio.org Affected version: 1.8.0.0 PRO Summary: Serviio is a free media server. It allows you to stream your media files music, video or images to renderer...

EulerOS 2.0 SP1 : sudo (EulerOS-SA-2017-1004)

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that the sudo noexec restriction could have been bypassed if application run via sudo executed system, popen, or wordexp C librar...

QEMU Privilege Permission and Access Control Vulnerabilities

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A privilege license and access control vulnerability exists in QEMU. An attacker can exploit this vulnerability to obtain elevated privileges...

Oracle JRockit R28.3.13 Multiple Vulnerabilities (April 2017 CPU)

The version of Oracle JRockit installed on the remote Windows host is R28.3.13. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the JCE subcomponent that allows a local attacker to gain elevated privileges. CVE-2017-3511 - An unspecified flaw exists in the...

Palo Alto Networks PAN-OS 7.0.x < 7.0.14 / 7.1.x < 7.1.9 Multiple Vulnerabilities (PAN-SA-2017-0008 - PAN-SA-2017-0010)

The version of Palo Alto Networks PAN-OS running on the remote host is 7.0.x prior to 7.0.14 or 7.1.x prior to 7.1.9. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the Management Web Interface due to improper validation of certain request parameters. An authenticated...

Security and Quality Rollup for .NET Framework (April 2017)

The version of Microsoft .NET Framework installed on the remote Windows host is missing a security update. It is, therefore, affected by an arbitrary code execution vulnerability due to a failure to properly validate input before loading libraries. A local attacker can exploit this to execute...

Adobe Creative Cloud Desktop Application 4.0.0.185 Privilege Escalation Vulnerability

Adobe Creative Cloud Desktop Application versions 4.0.0.185 and below suffers from a privilege escalation vulnerability. + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ADOBE-CREATIVE-CLOUD-PRIVILEGE-ESCALATION.txt + ISR:...

Cisco Mobility Express Software Default Credential Security Bypass Vulnerability

Cisco Mobility Express Software is a wireless networking solution. A security vulnerability exists in the implementation of Cisco Mobility Express Software that Cisco Aironet 1830 Series, Cisco Aironet 1850 Series Access Points devices are running due to default credentials. An unauthenticated...

Microsoft Office CVE-2017-0195 Privilege Escalation Vulnerability

Description Microsoft Office is prone to a privilege-escalation vulnerability. An attackers may exploit this issue to gain elevated privileges. Technologies Affected Microsoft Excel Services on Microsoft SharePoint Server 2010 Service Pack 2 Microsoft Excel Services on Microsoft SharePoint Server...

Privilege escalation

Privilege escalation in Lenovo Customer Care Software Development Kit CCSDK versions earlier than 2.0.16.3 allows local users to execute code with elevated privileges...

CVE-2016-8235

Privilege escalation in Lenovo Customer Care Software Development Kit CCSDK versions earlier than 2.0.16.3 allows local users to execute code with elevated privileges...

CVE-2016-8235

Privilege escalation in Lenovo Customer Care Software Development Kit CCSDK versions earlier than 2.0.16.3 allows local users to execute code with elevated privileges...

CVE-2016-8235

Privilege escalation in Lenovo Customer Care Software Development Kit CCSDK versions earlier than 2.0.16.3 allows local users to execute code with elevated privileges...

Google Android Qualcomm Kyro L2 driver elevation of privilege vulnerability

Google Android is a mobile operating system based on the Linux open kernel. Google Android suffers from an elevation of privilege vulnerability in the Qualcomm Kyro L2 driver implementation, which allows remote attackers to exploit the vulnerability to submit a special application with elevated...

Google Android kernel ION subsystem elevation of privilege vulnerability

Google Android is a mobile operating system based on the Linux open kernel. Google Android has a security vulnerability in the kernel ION implementation that allows remote attackers to exploit the vulnerability to submit special applications with elevated privileges...

Google Android Qualcomm Seemp driver elevation of privilege vulnerability

Google Android is a mobile operating system based on the Linux open kernel. Google Android has a security vulnerability in the Qualcomm Seemp driver implementation that allows remote attackers to exploit the vulnerability to submit special applications with elevated privileges...

Google Android Broadcom Wi-Fi driver elevation of privilege vulnerability (CNVD-2017-04965)

Google Android is a mobile operating system based on the Linux open kernel. Google Android has a security vulnerability in the Broadcom Wi-Fi driver implementation that allows remote attackers to exploit the vulnerability to submit special applications with elevated privileges...

Google Android HTC touchscreen driver elevation of privilege vulnerability

Google Android is a mobile operating system based on the Linux open kernel. Google Android has a security vulnerability in the HTC touchscreen driver implementation that allows remote attackers to exploit the vulnerability to submit special applications with elevated privileges...