WEG SuperDrive G2 12.0.0 - Insecure File Permissions

Exploit for windows platform in category local exploits WEG SuperDrive G2 v12.0.0 Insecure File Permissions Vendor: WEG Group Product web page: http://www.weg.net Affected version: SuperDrive G2 v12.0.0 Build 20150930-J1.8.060-NB8.0.2 SuperDrive v7.0.0 Summary: SuperDrive is a Windows graph tool...

iniNet SpiderControl PLC Editor Simatic 6.30.04 - Insecure File Permissions Vulnerability

Exploit for windows platform in category local exploits iniNet SpiderControl PLC Editor Simatic 6.30.04 Insecure File Permissions Vendor: iniNet Solutions GmbH Product web page: http://www.spidercontrol.net Affected version: 6.30.04 Build 6300400 Summary: Modular and automated engineering is...

iniNet SpiderControl SCADA Web Server Service 2.02 - Insecure File Permissions

iniNet SpiderControl SCADA Web Server Service 2.02 Insecure File Permissions Vendor: iniNet Solutions GmbH Product web page: http://www.spidercontrol.net Affected version: 2.02.0000 Summary: Modular and automated engineering is provided for HMI and SCADA. The tools are developed to join a large...

Red Hat Enterprise Virtualization Manager Very Long Snapshot Chain Denial of Service Vulnerability

Red Hat Enterprise Virtualization Manager is an enterprise virtualization management application solution from Red Hat. Red Hat Enterprise Virtualization Manager failed to set the correct snapshot creation permissions during a hot storage migration between two domains, allowing an authenticated...

Ubisoft Uplay 5.0 - Insecure File Permissions Privilege Escalation

Ubisoft Uplay 5.0 - Insecure File Permissions Privilege Escalation Ubisoft Uplay 5.0 Insecure File Permissions Local Privilege Escalation Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 5.0.0.3914 PC Summary: Uplay is a digital distribution, digital...

Ubisoft Uplay 5.0 - Insecure File Permissions Privilege Escalation

Ubisoft Uplay 5.0 Insecure File Permissions Local Privilege Escalation Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 5.0.0.3914 PC Summary: Uplay is a digital distribution, digital rights management, multiplayer and communications service created by...

Ubisoft Uplay 5.0 Insecure File Permissions Local Privilege Escalation

Ubisoft Uplay 5.0 Insecure File Permissions Local Privilege Escalation Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 5.0.0.3914 PC Summary: Uplay is a digital distribution, digital rights management, multiplayer and communications service created by...

Scientific Linux Security Update : conga on SL5.x i386/x86_64 (20140916)

It was discovered that Plone, included as a part of luci, did not properly protect the administrator interface control panel. A remote attacker could use this flaw to inject a specially crafted Python statement or script into Plone's restricted Python sandbox that, when the administrator interfac...

Telefonica O2 Connection Manager 3.4 - Local Privilege Escalation

Telefonica O2 Connection Manager 3.4 - Local Privilege Escalation Telefonica O2 Connection Manager 3.4 Local Privilege Escalation Vulnerability Vendor: Telefonica S.A. Product web page: http://www.telefonica.com | http://www.o2.co.uk Affected version: 3.4.R1 108 Summary: O2 Connection Manager...

Telefonica O2 Connection Manager 3.4 - Local Privilege Escalation

Telefonica O2 Connection Manager 3.4 Local Privilege Escalation Vulnerability Vendor: Telefonica S.A. Product web page: http://www.telefonica.com | http://www.o2.co.uk Affected version: 3.4.R1 108 Summary: O2 Connection Manager will help you to manage your internet connections by getting you...

dotProject 2.1.3 XSS and Improper Permissions

No description provided by source...

SopCast 3.4.7 (Diagnose.exe) Improper Permissions

No description provided by source. SopCast 3.4.7 Diagnose.exe Improper Permissions Vendor: SopCast.com Product web page: http://www.sopcast.com Affected version: 3.4.7.45585 Summary: SopCast is a simple, free way to broadcast video and audio or watch the video and listen to radio on the Internet...

Valve Steam Client Application 1559/1559 - Local Privilege Escalation

No description provided by source. Valve Steam Client Application v1559/1559 Local Privilege Escalation Vendor: Valve Corporation Product web page: http://www.steampowered.com Affected version: Built: Jun 1, 2011 at 15:31:24 Steam API: v010 Steam package versions 1559 / 1559 File version:...

XMB Forum 1.6 Magic Lantern Log File Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/4722/info XMB Forum 1.6 Magic Lantern allows remote users to conduct activities in the forum while bypassing normal logging functions. This is accomplished by submitting an arbitrary string as the analized variable to...

KLA10211 SB vulnerability in IBM Tivoli Storage Manager

An improper permissions vulnerability was found in IBM Tivoli Storage Manager. By exploiting this vulnerability malicious users can bypass access restrictions. This vulnerability can be exploited locally via standard file operations. Original advisories - Related products Tivoli-Storage-Manager C...

Huawei Technologies du Mobile Broadband 16.0 - Local Privilege Escalation

Huawei Technologies du Mobile Broadband 16.0 - Local Privilege Escalation Huawei Technologies du Mobile Broadband 16.0 Local Privilege Escalation Vendor: Huawei Technologies Co., Ltd. Product Web Page: http://www.huawei.com Affected version: 16.002.03.16.124 Summary: du Mobile Broadband is a...

Huawei Technologies du Mobile Broadband 16.0 Local Privilege Escalation

Summary du Mobile Broadband is a shareware application for du EITC UAE users to support mobile broadband 3G activation for du service provider with systems containing one of the supported devices. It lets you access du wireless internet wherever you are and whenever you need it, all powered throu...

Updated glibc package fixes security vulnerabilities

Updated glibc packages fixes the following security issues: Integer overflow in string/strcolll.c in the GNU C Library aka glibc or libc6 2.17 and earlier allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a long string, which triggers a...

MGASA-2013-0185 Updated java-1.7.0-openjdk packages fix multiple security vulnerabilities

Multiple flaws were discovered in the ImagingLib and the image attribute, channel, layout and raster processing in the 2D component. An untrusted Java application or applet could possibly use these flaws to trigger Java Virtual Machine memory corruption CVE-2013-2470, CVE-2013-2471, CVE-2013-2472...

Google Chrome < 25.0.1364.97 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is a version prior to 25.0.1364.97. It is, therefore, affected by the following vulnerabilities : - An unspecified memory corruption error exists related to 'web audio node'. CVE-2013-0879 - Use-after-free errors exist related to database...