ABRT/sosreport privilege elevation

Added: 12/14/2015 CVE: CVE-2015-5287 Background The Automatic Bug Reporting Tool ABRT is an application that runs as a daemon on some Linux systems. ABRT collects relevant crash data when another application crashes and can report it to a relevant issue tracker for analysis. After saving some...

ABRT/sosreport privilege elevation

Added: 12/14/2015 CVE: CVE-2015-5287 Background The Automatic Bug Reporting Tool ABRT is an application that runs as a daemon on some Linux systems. ABRT collects relevant crash data when another application crashes and can report it to a relevant issue tracker for analysis. After saving some...

ABRT/sosreport privilege elevation

Added: 12/14/2015 CVE: CVE-2015-5287 Background The Automatic Bug Reporting Tool ABRT is an application that runs as a daemon on some Linux systems. ABRT collects relevant crash data when another application crashes and can report it to a relevant issue tracker for analysis. After saving some...

Huawei Video Content Management Elevation of Privilege Vulnerability

Huawei Video Content Management is a video content management system from Huawei, China. A security vulnerability exists in Huawei Video Content Management that could be exploited by attackers to elevate privileges and perform unauthorized operations...

Android System Server Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. Versions of System Server prior to Android 6.0 2015-12-01 have a security vulnerability in their implementation, which can be exploited by a remote attacker to gain access to sensitive information and then elevate privileges...

CVE-2015-6173

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory...

Microsoft Windows Core Memory Privilege Elevation Vulnerability (CNVD-2015-08022)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the Microsoft Windows kernel that arises from a program's failure to properly handle objects in memory. An attacker can exploit the vulnerability to run...

Microsoft Windows Core Memory Privilege Elevation Vulnerability (CNVD-2015-08021)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the Microsoft Windows kernel that arises from a program's failure to properly handle objects in memory. An attacker could exploit the vulnerability to r...

Microsoft Windows Core Memory Privilege Elevation Vulnerability (CNVD-2015-08020)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the Microsoft Windows kernel that arises from a program's failure to properly handle objects in memory. An attacker could exploit the vulnerability to r...

Microsoft Internet Explorer Multiple Vulnerabilities (3116180)

This host is missing a critical security update according to Microsoft Bulletin MS15-124. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VLC DLL Hijack

Hi @ll, the executable installers ° of the videolan client VLC, see are vulnerable: 1. They load and execute a rogue/bogus/malicious ShFolder.dll '² and other DLLs like SetupAPI.dll or UXTheme.dll too eventually found in the directory they are started from the "application directory". For softwar...

MS15-133: Description of the security update for Windows PGM: December 8, 2015

None None...

Cisco IOS XE privilege elevation Vulnerability(CVE-2 0 1 5-6 3 8 3)-vulnerability warning-the black bar safety net

CVECAN ID: CVE-2 0 1 5-6 3 8 3 Cisco IOS is most Cisco Systems routers and network switches are used on the Internetoperating system. ASR 1 0 0 0 on the device, Cisco IOS XE 15.43S did not load properly package, local users through CLI, enter the configuration file name, use this vulnerability to...

EMC Isilon OneFS privilege elevation Vulnerability(CVE-2 0 1 5-6 8 4 8)-vulnerability warning-the black bar safety net

CVECAN ID: CVE-2 0 1 5-6 8 4 8 EMC Isilon OneFS Operating System is a collection of File System, Volume Manager and data protection in one smart file system. EMC Isilon OneFS in the realization on the presence of Privilege escalation vulnerabilities, if the RFC 2 3 0 7 on the cluster is enabled a...

CloudBees Jenkins Elevation of Privilege Vulnerability

CloudBees Jenkins is the open source continuous integration server. A security vulnerability exists in CloudBees Jenkins versions prior to 1.638, LTS 1.625.2, which can be exploited by remote administrators to gain elevated privileges to run scripts via another user's API token...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2015-07593)

Microsoft Windows is a series of operating systems designed for personal computer and server users from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1. An attacker could obtain...

CVE-2015-6098

Buffer overflow in the Network Driver Interface Standard NDIS implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows NDIS Elevation of Privilege Vulnerability."...

Microsoft Publisher Privilege Elevation Vulnerability (3104540)

This host is missing an important security update according to Microsoft Bulletin MS15-116. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office PowerPoint Privilege Elevation Vulnerability (3104540)

This host is missing an important security update according to Microsoft Bulletin MS15-116. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft InfoPath Privilege Elevation Vulnerability (3104540)

This host is missing a critical security update according to Microsoft Bulletin MS15-116. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...