ZKTeco ZKTime.Net 3.0.1.6 Insecure File Permissions

i? ZKTeco ZKTime.Net 3.0.1.6 Insecure File Permissions Vendor: ZKTeco Inc. | Xiamen ZKTeco Biometric Identification Technology Co.,ltd Product web page: http://www.zkteco.com Affected version: 3.0.1.6 3.0.1.5 160622 3.0.1.1 160216 Summary: ZKTime.Net V3.0 is a new generation time attendance...

AVG Internet Security avgtdix.sys Elevation of Privilege Vulnerability

AVG Internet Security is anti-virus protection software. AVG Internet Security is implemented with a local elevation of privilege vulnerability in the handling of 0x534a600c IOCTL within the avgtdix driver and 0x53606148 IOCTL within the avgidsdriverx driver. An attacker can exploit this...

Cisco Firepower Management Center and ASA 5500-X Series with FirePOWER Services Elevation of Privilege Vulnerability

Cisco Firepower Management Center and Cisco ASA 5500-X Series with FirePOWER Services are both next-generation firewall software from Cisco. An elevation of privilege vulnerability exists in the web-based GUI in Cisco Firepower Management Center and Cisco ASA 5500-X Series with FirePOWER Services...

Ubuntu: Security Advisory (USN-3063-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Android on Nexus devices elevation of privilege vulnerability (CNVD-2016-06293)

Android on Nexus is Google's line of high-end phones powered by stock Android. Android before 2016-08-05 on Nexus 5 and 7 devices suffers from an elevation of privilege vulnerability that allows attackers to gain privileges through a crafted application...

Android on Nexus devices elevation of privilege vulnerability (CNVD-2016-06291)

Android on Nexus is Google's line of high-end phones powered by stock Android. Android before 2016-08-05 on Nexus 5 and 7 devices suffers from an elevation of privilege vulnerability that allows attackers to gain privileges through a crafted application...

Fontconfig Arbitrary Code Execution Vulnerability

fontconfig is a library of functions that provide system-wide font settings, customization and allow applications to access them. An arbitrary code execution vulnerability exists in fontconfig, which can be exploited to trigger an arbitrary free call, which can lead to a double free attack to...

Microsoft Kernel-Mode Drivers Multiple Privilege Elevation Vulnerabilities (3178466)

This host is missing an important security update according to Microsoft Bulletin MS16-098. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2016-3311

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

MS16-098: Security update for Windows kernel-mode drivers: August 9, 2016

Resolves vulnerabilities in Microsoft Windows that could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application that could exploit the vulnerabilities and take control of an affected system.SummaryThis security update resolves...

MS16-101: Security update for Windows authentication methods: August 9, 2016

Resolves vulnerabilities in Windows that could allow elevation of privilege if an attacker runs a specially crafted application on a domain-joined system.Important This article contains information that shows you how to help lower security settings or how to turn off security features on a...

Lenovo XClarity Administrator Local Lift Vulnerability

Lenovo XClarity Administrator is a centralized resource management solution from Lenovo in China. A local elevation of privileges vulnerability exists in Lenovo XClarity Administrator versions prior to 1.1.1. A local attacker can exploit this vulnerability to gain administrator privileges...

Multiple Apple Products IOHIDFamily Local Elevation of Privilege Vulnerability

Apple iOS is an operating system developed for mobile devices; OS X is a specialized operating system developed for Mac computers; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. A security vulnerability in IOHIDFamily in several Apple products allows a local...

Oracle Java SE Multiple Unspecified Vulnerabilities-01 (Jul 2016) - Windows

Oracle Java SE is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Overflow in UEFI Variable Reclaim Function - Lenovo Support US

No description provided...

Meinberg NTP Time Server ELX800/GPS M4x V5. 30p remote code execution and elevation of Privilege vulnerabilities

No description provided by source...

GE Proficy HMI SCADA CIMPLICITY Local Privilege Vulnerability

GE Proficy HMI SCADA CIMPLICITY is a client/server based HMI/SCADA solution. A security vulnerability exists in GE Proficy HMI SCADA CIMPLICITY that allows a local attacker to exploit the vulnerability to elevate privileges...

CVE-2016-3239

The CVE-2016-3239 issue is a local privilege-escalation vulnerability in the Windows Print Spooler component. Affected systems include Windows Vista/7/8.1/10 and corresponding Server SKUs where the Print Spooler can write to the filesystem, enabling local attackers to gain elevated privileges. Mi...

CVE-2016-3254

CVE-2016-3254 is a Win32k Elevation of Privilege vulnerability affecting multiple Windows releases (Vista to Windows 10) where a crafted user-mode application can cause a kernel-mode elevation via Windows kernel drivers. The description specifies local privileges escalation but the documents do n...

Microsoft Windows Win32k Elevation of Privilege Vulnerability (CNVD-2016-04746)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel-mode drivers is one of the kernel driver management software. An elevation of privilege vulnerability exists in the kernel-mode driver in Microsoft Windows Server 2012 and Windows 10...