CVE-2017-7423: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CWE-352 vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to forge requests, if this component is configured. This includes...

Virtuozzo 7 : readykernel-patch (VZA-2017-072)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerabilities : - A race condition issue leading to a use-after-free flaw was found in the way the raw packet sockets are implemented ...

Design/Logic Flaw

A vulnerability in the Cisco Virtual Network Function VNF Element Manager could allow an authenticated, remote attacker to elevate privileges and run commands in the context of the root user on the server. The vulnerability is due to command settings that allow Cisco VNF Element Manager users to...

CVE-2017-6710

A vulnerability in the Cisco Virtual Network Function VNF Element Manager could allow an authenticated, remote attacker to elevate privileges and run commands in the context of the root user on the server. The vulnerability is due to command settings that allow Cisco VNF Element Manager users to...

Red Hat CloudForms Management Engine Elevation of Privilege Vulnerability (CNVD-2017-28783)

Red Hat CloudForms Management Engine is a management engine for IaaS cloud service solutions. A security vulnerability in some of the ways that the Red Hat CloudForms Management Engine handles rails applications allows remote attackers to exploit the vulnerability to submit a specially crafted...

PT-2017-3684

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 58 Description: The issue is related to WebExtensions, which can bypass user prompts, allowing an arbitrarily downloaded file to be saved and then opened. This can lead to an executable file running with local user...

IBM InfoSphere Information Server Elevation of Privilege Vulnerability (CNVD-2017-241828)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. An elevation of privilege vulnerability exists in IBM InfoSphere Information Server versions 9.1, 11.3, and...

CVE-2017-6327

The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of occurrence, after gaining access to t...

Wando ezoffice Collaboration Management Platform has an overstepping vulnerability

Wando ezOFFICE collaborative management platform is a comprehensive information base application platform. Wando ezOFFICE Collaborative Management Platform has an overstepping vulnerability that allows an attacker to successfully achieve elevation of privilege through ordinary user identity...

CVE-2017-0749

A elevation of privilege vulnerability in the Upstream Linux linux kernel. Product: Android. Versions: Android kernel. Android ID: A-36007735...

CVE-2017-0741

A elevation of privilege vulnerability in the MediaTek gpu driver. Product: Android. Versions: Android kernel. Android ID: A-32458601. References: M-ALPS03007523...

PT-2017-10636

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an elevation of privilege vulnerability in the Upstream Linux linux kernel, affecting the Android product. Recommendations For Android kernel, apply the fix provided in Android ID A-36007735 t...

PT-2017-10632

Name of the Vulnerable Software and Affected Versions Android kernel Description A elevation of privilege issue exists in the MediaTek gpu driver. Recommendations For Android kernel, apply the fix referenced by Android ID: A-32458601 to resolve the issue...

PT-2017-10634

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an elevation of privilege vulnerability in the Qualcomm ipa driver. It affects Android products. Recommendations For Android kernel, apply the fix referenced by Android ID A-35467471 to resolv...

CVE-2017-8642

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to elevate privileges due to the way that Microsoft Edge validates JavaScript under specific conditions, aka "Microsoft Edge Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8503...

CVE-2017-8642

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to elevate privileges due to the way that Microsoft Edge validates JavaScript under specific conditions, aka "Microsoft Edge Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8503...

CVE-2017-8642

CVE-2017-8642 is an elevation-of-privilege issue in Microsoft Edge on Windows 10 (1703) caused by improper JavaScript validation, enabling privilege escalation. The CNVD entry confirms the flaw and impact but does not provide a patch/version to fix. Other connected records reference the same Edge...

KB4034658: Windows 10 Version 1607 and Windows Server 2016 August 2017 Cumulative Update

The remote Windows host is missing security update 4034658. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when Microsoft Windows improperly handles NetBIOS packets. An attacker who successfully exploited this vulnerability could cause a target...

PT-2017-3398

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.0 Description The issue is related to an elevation of privilege vulnerability in the Android system's Bluetooth component, which is associated with inadequate access control. This could allow an attacker to execu...

KLA11846 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of...