Double free

Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service use-after-free and daemon crash because of a forcerescanuser error...

CVE-2019-9706

Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service use-after-free and daemon crash because of a forcerescanuser error...

CVE-2019-9704

Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service daemon crash via a large crontab file because the calloc return value is not checked...

CVE-2019-9704

Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service daemon crash via a large crontab file because the calloc return value is not checked...

CVE-2018-1890

IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081...

Code injection

IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081...

CVE-2018-1890

IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081...

CVE-2018-1890

CVE-2018-1890 affects IBM SDK Java Technology Edition Version 8 on the AIX platform, where absolute RPATHs in the JVM launcher may enable local code injection and privilege escalation. The vulnerability is documented across IBM advisories (e.g., January 2019 CPU/IBM Java SDK bulletins) and is ref...

CVE-2018-1890

IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081. Recent assessments: timb-machine at March 05, 2021 12:26am UTC reported: Unlikely to be setUID, unlikely that you...

CVE-2018-1890: Uncontrolled Search Path Element

IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081...

CVE-2018-1890

IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081...

CVE-2019-3582 McAfee Endpoint Security updates fix a privilege escalation vulnerability

Privilege Escalation vulnerability in Microsoft Windows client in McAfee Endpoint Security ENS 10.6.1 and earlier allows local users to gain elevated privileges via a specific set of circumstances...

CVE-2019-3582

Privilege Escalation vulnerability in Microsoft Windows client in McAfee Endpoint Security ENS 10.6.1 and earlier allows local users to gain elevated privileges via a specific set of circumstances...

CVE-2019-3582

Privilege Escalation vulnerability in Microsoft Windows client in McAfee Endpoint Security ENS 10.6.1 and earlier allows local users to gain elevated privileges via a specific set of circumstances...

PT-2019-16630

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security ENS versions 10.6.1 and earlier Description A privilege escalation issue exists, allowing local users to gain elevated privileges under specific circumstances. Recommendations For McAfee Endpoint Security ENS versions...

EulerOS 2.0 SP2 : kernel (EulerOS-SA-2019-1062)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Missing check in fs/inode.c:inodeinitowner does not clear SGID bit on non-directories for non-members.CVE-2018-13405 - A null pointer dereferenc...

Design/Logic Flaw

Data Leakage Attacks vulnerability in Microsoft Windows client in McAfee True Key TK 3.1.9211.0 and earlier allows local users to expose confidential data via specially crafted malware...

CVE-2019-3610: Exposure of Sensitive Information to an Unauthorized Actor

Data Leakage Attacks vulnerability in Microsoft Windows client in McAfee True Key TK 3.1.9211.0 and earlier allows local users to expose confidential data via specially crafted malware...

CVE-2018-20587

Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control. Local users can exploit this to steal currency by binding the RPC IPv4 localhost port, and forwarding requests to the IPv6 localhost port...

CVE-2018-20587

Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control. Local users can exploit this to steal currency by binding the RPC IPv4 localhost port, and forwarding requests to the IPv6 localhost port...