Cisco VPN Client 5.x <= 5.0.07.0440 vpnclient.ini Privilege Escalation

The version of the Cisco VPN client installed on the remote host is 5.x prior or equal to 5.0.07.0440. It is, therefore, affected by a flaw due to insecure permissions for file vpnclient.ini. A local attacker can exploit this, by inserting an arbitrary program name in the Command field of the...

Microsoft Windows CVE-2016-3346 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for...

Microsoft Windows CVE-2016-3302 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for...

Microsoft Windows Kernel CVE-2016-3372 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows Server 2008 for 32-bit Systems SP2 Microsoft Windows Server 2008 for Itanium-based Systems SP2 Microso...

Microsoft Windows CVE-2016-3368 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code with elevated privileges. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft Windows 10 Version...

MS16-110: Security update for Microsoft Windows: September 13, 2016

Resolves vulnerabilities in Windows that could allow remote code execution if an attacker creates a specially crafted request and executes arbitrary code with elevated permissions on a target system.SummaryThis security update resolves multiple vulnerabilities in Microsoft Windows. The most sever...

Microsoft Windows Win32k Elevation of Privilege (MS16-106: CVE-2016-3348)

An elevation of privilege vulnerability exists in Microsoft Windows Win32k. The vulnerability is caused when Microsoft Windows improperly deals with one of its kernel components. A successful exploitation could allow an attacker to run arbitrary code with elevated privileges...

Oracle MySQL Unspecified Vulnerability-02 (Sep 2016) - Windows

Oracle MySQL is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; ifdescripti...

Oracle MySQL Unspecified Vulnerability-03 (Sep 2016) - Linux

Oracle MySQL is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Kernel Remote Buffer Overflow Vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. The Linux Kernel suffers from a remote buffer overflow vulnerability that allows an attacker to exploit the vulnerability to execute arbitrary code in the kernel context with...

Oracle MySQL Unspecified Vulnerability-01 (Sep 2016) - Windows

Oracle MySQL is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; ifdescripti...

Oracle MySQL Unspecified Vulnerability-03 (Sep 2016) - Windows

Oracle MySQL is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Android elevation of privilege vulnerability (CNVD-2016-07428)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. There is a security vulnerability in ndroid that allows an attacker to exploit the vulnerability to build malicious applications that can be elevated in privilege by inducing users to...

Internet Bug Bounty: The “Malstaller” Attack, global hijacking of any installation process to achieve RCE with elevated privileges, Windows OS (vendor agnostic)

Malstaller is a severe vulnerability that affects the installation process of an unknown number of software including many top-100 download software. The vulnerability affects Windows OS WIN 7 verified vulnerable users and variations of the attack can affect already installed software and native...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the drivers/media/radio/radio-iris.c component of Qualcomm’s Android operating system arises due to buffer overflow. Exploiting this vulnerability allows a remote attacker to enhance their privileges through a specially created application...

CVE-2016-7091

It was discovered that the default sudo configuration preserved the value of INPUTRC from the user's environment, which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw to read content from specially formatted files...

Palo Alto Networks PAN-OS 6.0.x < 6.0.14 Multiple Vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is 6.0.x prior to 6.0.14. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists that allows an authenticated, remote attacker to gain elevated privileges. - An unspecified flaw exists in the policy...

AVG Internet Security Local Privilege Vulnerability

AVG Internet Security is a suite of Internet security software from the Czech company AVG. The program supports instant detection of any accessed files, protection of the computer from viruses, scanning of e-mail and attached files, and other features. A local exploit exists in AVG Internet...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Qualcomm GPU operating system for Android is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...

VMware Fusion Guest Privilege Escalation Vulnerability (Aug 2016) - Mac OS X

VMware Fusion is prone to an important guest privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...