CVE-2016-2126

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC Privilege Attribute Certificate checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the...

CVE-2016-2126

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC Privilege Attribute Certificate checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the...

CVE-2016-2126

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC Privilege Attribute Certificate checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the...

NVIDIA GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-07280)

NVIDIA GPU Display Driver is a set of graphics processor GPU graphics card drivers from NVIDIA. A security vulnerability exists in the kernel mode layer handler in the NVIDIA GPU Display Driver. The vulnerability can be exploited to cause a denial of service null pointer backreference or elevatio...

NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-07445)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A local elevation of privilege vulnerability exists in the kernel mode layer nvlddmkm.sys handler in the NVIDIA Windows GPU Display Driver. An attacker could use this vulnerability ...

NVIDIA GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-07278)

NVIDIA GPU Display Driver is a set of graphics processor GPU graphics card drivers from NVIDIA. A security vulnerability exists in the GPU firmware in NVIDIA GPU Display Driver due to the program failing to properly enforce access control. An attacker could exploit the vulnerability to elevate...

NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-07438)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A local elevation of privilege vulnerability exists in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape in the NVIDIA Windows GPU Display Driver. An attacker could use th...

NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-07444)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A local elevation of privilege vulnerability exists in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in the NVIDIA Windows GPU Display Driver, which arises when the...

Brocade Fibre Channel SAN Product Brocade Fabric OS Remote Elevation of Privilege Vulnerability

Brocade Fibre Channel SAN products are all switch products of the American company Brocade Brocade, and Brocade Fabric OS FOS is a set of embedded systems running on them. A remote elevation of privilege vulnerability exists in Brocade Fibre Channel SAN products with Brocade FOS versions prior to...

Microsoft SharePoint Foundation Privilege Elevation Vulnerability (3191914)

This host is missing an important security update for Microsoft SharePoint Foundation according to Microsoft KB3191914 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Apple Mac OS X and Mac OS X Server Kernel Elevation of Privilege Vulnerability

Apple Mac OS X and Apple Mac OS X Server are products of Apple, Inc. Apple Mac OS X is a specialized operating system for Mac computers, and Apple Mac OS X Server is a server operating system, of which ImageIO is a static method used to perform common image ImageIO is a static method used to...

PT-2017-10461 · Microsoft · Windows Server 2012 +7

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue arises when Windows fails to properly validate input before loading type libraries, allowing an elevation of privilege. This could potentially affect the system...

Google Android Framework APIs elevation of privilege vulnerability (CNVD-2017-08230)

Google Android is a Linux-based operating system for smartphone devices. An elevation of privilege vulnerability exists in the Google Android Framework APIs, which can be exploited by remote attackers to build malicious applications, execute arbitrary code, and elevate privileges...

Elevation of Privilege Vulnerability in WSS Project Management System

WSS Project Management System is a browser-based collaborative office platform that integrates "Project Management", "Task Management", "Work Hour Management", "Work Log Management" and "Work Log Management". management" as one of the collaborative office platform. An elevation of privilege...

Google Android Qualcomm Secure Execution Environment Communicator Driver Elevation of Privilege Vulnerability

Android on Nexus 5X, etc. is an open source Linux-based operating system for Nexus 5X and other smart devices developed by Google and the Open Handheld Alliance OHA.The Qualcomm Secure Execution Environment QSE is an interface used to provide communication between the user space and the Qualcomm...

Oracle Primavera P6 Enterprise Project Portfolio Management Privilege Mobilization Vulnerability (CNVD-2017-07251)

Oracle Primavera P6 Enterprise Project Portfolio Management is a comprehensive project portfolio management PPM solution that includes role-specific functionality to meet the needs, responsibilities, and skills of each team member. An elevation of privilege vulnerability exists in Oracle Primaver...

Intel Patches Nine-Year-Old Critical CPU Vulnerability

Intel patched a critical vulnerability that dates back nine years and impacts business desktop PCs that utilize the company’s Active Management Technology. According to an Intel security bulletin, the flaw could allow an adversary to elevate privileges on a vulnerable system. Intel said there are...

SolarWinds Log and Event Manager Elevation of Privilege Vulnerability

SolarWinds Log and Event Manager is a log and event manager that provides real-time log analysis, memory event correlation, and threat attack response. A privilege acquisition vulnerability exists in SolarWinds Log and Event Manager version 6.3.1. This vulnerability can be exploited by a local...

Oracle Java SE Multiple Vulnerabilities (April 2017 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 6 Update 151, 7 Update 141, or 8 Update 131. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Networking subcomponent that allows an unauthenticated...

Objective Development Little Snitch Local Privilege Vulnerability

Objective Development Little Snitch is a suite of personal security software for Mac from the Austrian company Objective Development. A local elevation of privilege vulnerability exists in Objective Development Little Snitch versions 3.0 through 3.7.3. An attacker can exploit this vulnerability t...