2555 matches found
Microsoft Windows Kernel CVE-2016-0073 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft...
Important: Red Hat Security Advisory: CFME 4.1 bug fixes and enhancement update
Updated cfme packages that fix bugs and add various enhancements are now available for Red Hat CloudForms 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Known Issue – 10.3.10 XenMobile Apps not appearing on Store in MAM only environments
The XenMobile Engineering Team has identified a known issue affecting only customers in MAM -only environments MDM-only and XME customers are not affected. When an iOS device enrolls in a MAM only environment, the iOS version is not being updated following iOS upgrades. This issue will appear...
Microsoft Windows Kernel 'Win32k.sys' CVE-2016-3348 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit...
Microsoft Windows Kernel CVE-2016-3372 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows Server 2008 for 32-bit Systems SP2 Microsoft Windows Server 2008 for Itanium-based Systems SP2 Microso...
Microsoft Windows Kernel CVE-2016-3371 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft...
Kali Linux 2016.2 — Download Latest Release Of Best Operating System For Hackers
As promised at the Black Hat and Def Con security and hacking conferences, Offensive Security – the creators of Swiss army knife for researchers, penetration testers, and hackers – has finally released the much awaited Kali Linux 2016.2. Kali Linux is an open-source Debian-based Linux distributio...
IBM Tivoli Storage Manager for Virtual Environments Security Bypass Vulnerability
IBM Tivoli Storage Manager for Virtual Environments TSMVE is a VM backup and recovery solution from IBM USA. The solution protects VMware vSphere virtual machines by offloading backup workloads to a central server. A security bypass vulnerability exists in IBM TSMVE versions 7.1.0.0 through 7.1.4...
IBM TSM for Virtual Environments 6.4.x < 6.4.3.4 / 7.1.x < 7.1.6.0 RCE
The version of IBM Tivoli Storage Manager TSM for Virtual Environments installed on the remote host is 6.4.x prior to 6.4.3.4 or 7.1.x prior to 7.1.6.0. It is, therefore, affected by an unspecified flaw in the GUI that allows an authenticated, remote attacker in limited cases to exercise certain...
[SECURITY] Fedora 23 Update: spice-0.12.8-1.fc23
The Simple Protocol for Independent Computing Environments SPICE is a remote display system built for virtual environments which allows you to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine...
IBM Lotus Protector for Mail Security Cross-Site Scripting Vulnerability
IBM Lotus Protector for Mail Security is a suite of email content filtering solutions for IBM Lotus Notes, IBM Lotus Domino, Microsoft Exchange and hybrid email environments. A cross-site scripting vulnerability exists in IBM Lotus Protector for Mail Security, which allows remote attackers to...
Academics Devise New Way to Steal Data from Air-Gapped Computers
Stealing data from air-gapped computers is one of the great exercises in computer security: advanced attackers covet what’s stored on these isolated machines, while researchers try to figure out the novel ways adversaries could jump those gaps. The latest effort doesn’t involve USBs, heat,...
Microsoft Windows Kernel 'Win32k.sys' CVE-2016-3311 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit...
Microsoft Internet Explorer CVE-2016-3321 Local Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to a local information-disclosure vulnerability. An authenticated attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Internet Explorer 10 and 11 are vulnerable. Technologies Affected Microsoft Internet...
The vulnerability of the Android operating system, which allows a hacker to bypass the security mechanisms of a isolated execution environment
The vulnerability of the libs/binder/Parcel.cpp file in the Parcels software interface of the Android operating system is related to the lack of checking for the return value of system calls. Exploiting this vulnerability allows a malicious actor to bypass the security mechanisms of isolated...
[SECURITY] Fedora 24 Update: spice-0.12.8-1.fc24
The Simple Protocol for Independent Computing Environments SPICE is a remote display system built for virtual environments which allows you to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine...
HTTP Proxy header vulnerability
httpoxy is a set of vulnerabilities that affect application code running in CGI, or CGI-like environments. See provided link...
Kubernetes: disclosure of information in multi tenant environments via watch-cache list
The Kubernetes API server contains a watch cache that speeds up performance. Due to an input validation error OpenShift Enterprise may return data for other users and projects when queried by a user. An attacker with knowledge of other project names could use this vulnerability to view their...
Microsoft Windows CVE-2016-3287 Local Security Bypass Vulnerability
Description Microsoft Windows is prone to a local security-bypass vulnerability. Local attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based System...
Microsoft Windows Kernel 'Win32k.sys' CVE-2016-3254 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsof...