Lucene search
+L

4740 matches found

Prion
Prion
added 2016/12/15 10:59 p.m.28 views

Design/Logic Flaw

base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565...

7.2CVSS8.8AI score0.22684EPSS
SaveExploits11References18Affected Software1
Debian CVE
Debian CVE
added 2016/12/15 10:00 p.m.29 views

CVE-2016-9566

Removed by vendor...

7.8CVSS8.7AI score0.04885EPSS
SaveExploits9
Cvelist
Cvelist
added 2016/12/15 10:00 p.m.40 views

CVE-2016-9566

base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565...

8AI score0.04885EPSS
SaveExploits9References18
OSV
OSV
added 2016/12/15 12:00 a.m.7 views

UBUNTU-CVE-2016-9566

base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565...

7.8CVSS7.2AI score0.04885EPSS
SaveExploits9References3
UbuntuCve
UbuntuCve
added 2016/12/15 12:00 a.m.30 views

CVE-2016-9566

base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565...

7.8CVSS7.1AI score0.04885EPSS
SaveExploits9References2
OpenVAS
OpenVAS
added 2016/12/15 12:00 a.m.134 views

Nagios Privilege Escalation Vulnerability

Nagios is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nagios:nagios"; if...

7.8CVSS8.8AI score0.04885EPSS
SaveExploits9References1
NVD
NVD
added 2016/12/14 6:59 p.m.23 views

CVE-2016-4443

Red Hat Enterprise Virtualization RHEV Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file...

5.5CVSS5.2AI score0.00235EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2016/12/14 12:00 a.m.28 views

Microsoft Windows Common Log File System Driver Information Disclosure Vulnerability (3207328)

This host is missing an important security update according to Microsoft Bulletin MS16-153. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

5.5CVSS6.5AI score0.02712EPSS
SaveExploits0References4
CNVD
CNVD
added 2016/12/14 12:00 a.m.11 views

Microsoft Windows Local Information Disclosure Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An information disclosure vulnerability exists in the Microsoft Windows Universal Log File System driver, which arises from a failure of the program driver to properly handle objects in memory. The...

5.5CVSS6.2AI score0.02712EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
added 2016/12/13 8:00 a.m.84 views

December 2016 Security Only Quality Update for Windows Server 2012

December 2016 Security Only Quality Update for Windows Server 2012 Summary This security update resolves the following vulnerabilities in Windows Server 2012: MS16-153 Security update for common log file system driver MS16-151 Security update for Windows kernel-mode drivers MS16-149 Security upda...

9.3CVSS7.5AI score0.73289EPSS
SaveExploits10
Microsoft KB
Microsoft KB
added 2016/12/13 8:00 a.m.69 views

December 2016 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2

December 2016 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1 and Windows Server 2012 R2: MS16-153 Security update for common log file system driver MS16-151 Security update for Windows...

9.3CVSS7.4AI score0.73289EPSS
SaveExploits12
Microsoft CVE
Microsoft CVE
added 2016/12/13 8:00 a.m.41 views

Windows Common Log File System Driver Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have...

6CVSS6.9AI score0.02712EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2016/12/13 8:00 a.m.100 views

December 2016 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1

December 2016 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This security update resolves the following vulnerabilities in Windows: MS16-153 Security update for common log file system driver MS16-151 Security update for Windows kernel-mode drivers MS16-1...

9.3CVSS7.3AI score0.73289EPSS
SaveExploits10
Microsoft KB
Microsoft KB
added 2016/12/13 8:00 a.m.57 views

MS16-153: Description of the security update for Common Log File System driver: December 13, 2016

None None...

5.5CVSS6.7AI score0.02712EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2016/12/13 8:00 a.m.57 views

December 2016 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1

December 2016 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This security update resolves the following vulnerabilities in Windows 7 and Windows Server 2008 R2: MS16-153 Security update for common log file system driver MS16-151 Security update for Windows...

9.3CVSS7AI score0.73289EPSS
SaveExploits10
Check Point Advisories
Check Point Advisories
added 2016/12/13 12:00 a.m.32 views

Microsoft Windows CLFS Driver Information Disclosure (MS16-153: CVE-2016-7295)

An elevation of privilege vulnerability exists in the Windows Common Log File System CLFS driver of Microsoft Windows. The vulnerability is due to the way Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run processes in an elevated...

2.1CVSS5.6AI score0.02712EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2016/12/13 12:00 a.m.102 views

KLA10924 Privilege escalation and information disclosure vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information or gain privileges. Below is a complete list of vulnerabilities: 1. An improper handling of objects in memory while running a Windows Crypto...

9.3CVSS8AI score0.42488EPSS
SaveExploits5References43
Tenable Nessus
Tenable Nessus
added 2016/12/13 12:00 a.m.45 views

MS16-153: Security Update for Common Log File System Driver (3207328)

The remote Windows host is missing a security update. It is, therefore, affected by an information disclosure vulnerability in the Windows Common Log File System CLFS due to improper handling of objects in memory. A local attacker can exploit this vulnerability, via a specially crafted applicatio...

5.5CVSS7AI score0.02712EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2016/12/13 12:00 a.m.51 views

MS16-153: Security update for Common Log File System driver: December 13, 2016

Resolves a vulnerability in Windows that could allow information disclosure when the Windows Common Log File System CLFS driver improperly handles objects in memory. In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to bypass...

5.5CVSS5.4AI score0.02712EPSS
SaveExploits0
NVD
NVD
added 2016/11/30 11:59 a.m.24 views

CVE-2016-2943

IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by leveraging unspecified privileges to read a log file...

1.9CVSS3.2AI score0.00274EPSS
SaveExploits0References3
Rows per page
Query Builder