Information disclosure

sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw ...

CVE-2016-7091

sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw ...

CVE-2016-7091

sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw ...

CVE-2016-7091

sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw ...

FreeBSD : Joomla! -- multiple vulnerabilities (624b45c0-c7f3-11e6-ae1b-002590263bf5)

The JSST and the Joomla! Security Center report : 20161201 - Core - Elevated Privileges Incorrect use of unfiltered data stored to the session on a form validation failure allows for existing user accounts to be modified; to include resetting their username, password, and user group assignments...

FreeBSD : Joomla! -- multiple vulnerabilities (a27d234a-c7f2-11e6-ae1b-002590263bf5)

The JSST and the Joomla! Security Center report : 20161001 - Core - Account Creation Inadequate checks allows for users to register on a site when registration has been disabled. 20161002 - Core - Elevated Privilege Incorrect use of unfiltered data allows for users to register on a site with...

NVIDIA Windows GPU Display Driver 340.x < 342.01 / 375.x < 376.33 Multiple Vulnerabilities

The version of the NVIDIA GPU display driver installed on the remote Windows host is 340.x prior to 342.01 or 375.x prior to 376.33. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape due to improper access...

SAP BusinessObjects BI Platform Remote Command Execution Vulnerability

SAP BusinessObjects BI Platform is the German SAP SAP company's set of business intelligence BI solution platform. A remote command execution vulnerability exists in SAP BusinessObjects BI Platform, which can be exploited by an attacker to execute arbitrary commands with elevated privileges, and ...

Moxa DACenter Denial of Service Vulnerability

Moxa DACenter is an OPC interface from Moxa that interacts with the Moxa Active OPC server for real-time data collection. A denial of service vulnerability exists in Moxa DACenter 1.4 and prior versions. A local attacker could exploit this vulnerability to gain elevated privileges or cause a deni...

Joomla Core Privilege Escalation Vulnerability

Joomla is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

MySQL 5.7.x < 5.7.17 Multiple Vulnerabilities (January 2017 CPU) (July 2017 CPU)

The version of MySQL running on the remote host is 5.7.x prior to 5.7.17. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Security: Encryption subcomponent that allows an authenticated, remote attacker to cause a denial of service condition...

Scientific Linux Security Update : sudo on SL7.x x86_64 (20161103)

Security Fixes : - It was discovered that the default sudo configuration preserved the value of INPUTRC from the user's environment, which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw to read content from...

Microsoft Windows Kernel Mode Drivers Multiple Vulnerabilities (3205651)

This host is missing an important security update according to Microsoft Bulletin MS16-151 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

UBUNTU-CVE-2016-6706

An elevation of privilege vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to...

Security update for the Linux Kernel (important)

The openSUSE 14.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg or /dev/bsg to elevate their privileges bsc1013604. The...

Intel Wireless Bluetooth Driver Unreferenced Service Path Vulnerability

Intel Wireless Bluetooth driver is a set of drivers for wireless bluetooth devices from Intel. A non-referenced service path vulnerability exists in the Intel Wireless Bluetooth driver prior to version 18.1.1607.3129. A local attacker can exploit this vulnerability to execute unauthorized code wi...

Design/Logic Flaw

Unquoted service path vulnerability in Intel Wireless Bluetooth Drivers 16.x, 17.x, and before 18.1.1607.3129 allows local users to launch processes with elevated privileges...

CVE-2016-8102

Unquoted service path vulnerability in Intel Wireless Bluetooth Drivers 16.x, 17.x, and before 18.1.1607.3129 allows local users to launch processes with elevated privileges...

CVE-2016-8102

CVE-2016-8102 is an Unquoted service path vulnerability in Intel Wireless Bluetooth Driver packages (16.x, 17.x, and before 18.1.1607.3129) that allows a local attacker with elevated privileges to cause code execution when the driver loads. The root cause is an unquoted service path, enabling a l...

sudo security update

CentOS Errata and Security Advisory CESA-2016:2872 An update for sudo is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, whic...