1407 matches found
CVE-2022-48377
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges...
CVE-2021-33971
Qihoo 360 https://www.360.cn/ Qihoo 360 Safeguard https://www.360.cn/ Qihoo 360 Total Security http://www.360totalsecurity.com/ is affected by: Buffer Overflow. The impact is: execute arbitrary code local. The component is: This is a set of vulnerabilities affecting popular software, "360...
Buffer overflow
Qihoo 360 https://www.360.cn/ Qihoo 360 Safeguard https://www.360.cn/ Qihoo 360 Total Security http://www.360totalsecurity.com/ is affected by: Buffer Overflow. The impact is: execute arbitrary code local. The component is: This is a set of vulnerabilities affecting popular software, "360...
CVE-2021-33971
Qihoo 360 https://www.360.cn/ Qihoo 360 Safeguard https://www.360.cn/ Qihoo 360 Total Security http://www.360totalsecurity.com/ is affected by: Buffer Overflow. The impact is: execute arbitrary code local. The component is: This is a set of vulnerabilities affecting popular software, "360...
CVE-2021-33974
CVE-2021-33974 affects Qihoo 360 products: Safeguard (12.1.0.1004/1005, 13.1.0.1001), Total Security (10.8.0.1060/1213), and Safe Browser & 360 Chrome (version 12). Root cause is a buffer overflow enabling remote arbitrary code execution. Attack vectors include: in the browser, exploitation by si...
CVE-2021-33971
The CVE-2021-33971 entry applies to Qihoo 360 products (360 Safeguard, 360 Total Security, and 360 Safe Browser/Chrome). The vulnerability family is a buffer overflow that enables local arbitrary code execution. Affected versions include 360 Safeguard 12.1.0.1004–13.1.0.1001, 360 Total Security 1...
CVE-2023-1629
A vulnerability classified as critical was found in JiangMin Antivirus 16.2.2022.418. Affected by this vulnerability is the function 0x222010 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit...
PT-2023-17133 · Jiangmin · Jiangmin Antivirus
Name of the Vulnerable Software and Affected Versions: JiangMin Antivirus version 16.2.2022.418 Description: A problematic issue was found in the library kvcore.sys of the component IOCTL Handler, affecting the function 0x222010. This leads to a null pointer dereference. The issue can be exploite...
PT-2023-17026 · Lespeed Wisecleaner · Wisehdinfo64.Dll +1
Name of the Vulnerable Software and Affected Versions: Lespeed WiseCleaner Wise System Monitor version 1.5.3.54 Description: A critical issue has been found, affecting the function 0x9C402088 in the WiseHDInfo64.dll library of the IoControlCode Handler component. This leads to improper access...
UNISOC Chipsets 缓冲区错误漏洞
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in the UNISOC Chipsets wlan module that stems from a lack of parameter checking. This could lead to a local denial of service in the wlan service...
Debian: Security Advisory (DSA-2015-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
K8602: XSS vulnerability viewing logs from the web management interface
Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...
CVE-2023-24575
Dell Multifunction Printer E525w Driver and Software Suite, versions prior to 1.047.2022, A05, contain a local privilege escalation vulnerability that could be exploited by malicious users to compromise the affected system...
PT-2023-16609 · Filseclab · Filseclab Twister Antivirus
Name of the Vulnerable Software and Affected Versions: Filseclab Twister Antivirus version 8.17 Description: A problematic issue has been found in the IoControlCode Handler component, specifically affecting the function 0x220017 in the ffsmon.sys library. This issue leads to denial of service and...
SUSE CVE-2004-1001
Unknown vulnerability in the passwdcheck function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pamchauthtok function call is not properly handled...
SUSE CVE-2005-0602
Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges...
SUSE CVE-2007-1743
suexec in Apache HTTP Server httpd 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local users to leverage other vulnerabilities to create arbitrary UID/GID owned files if /proc is mounted. NOTE: the researcher, who is reliable, claims that the vend...
SUSE CVE-2007-5718
vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the 1 /tmp/vobcopy.bla or 2 /tmp/vobcopy0.5.14.log temporary file...
SUSE CVE-2012-0494
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows local users to affect availability via unknown vectors...
SUSE CVE-2012-3160
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows local users to affect confidentiality via unknown vectors related to Server Installation...