CVE-2018-6947: Improper Initialization

An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.662 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 32 and 64bit, and denial of service for Windows 8 and 10...

CVE-2014-10070

Mode C: CVE-2014-10070 affects zsh prior to 5.0.7, where environment-imported initial values of integer variables may be evaluated instead of literals when zsh is invoked in privilege-elevation contexts with unsanitized env (e.g., sudo with env_reset disabled). This can enable local privilege esc...

IBM Client Application Access and Notes Elevation of Privilege Vulnerability

IBM Client Application Access and IBM Notes are both products of IBM Corporation in the U.S. IBM Client Application Access is a set of tools for accessing local applications.IBM Notes is a set of collaborative office software. An elevation of privilege vulnerability exists in IBM Client Applicati...

PT-2018-9142

Name of the Vulnerable Software and Affected Versions: Microsoft Identity Manager 2016 SP1 Description: The issue arises from the improper sanitization of a specially crafted attribute value, which is displayed to a user on an affected server. This allows an attacker to gain elevated privileges...

Google Android Kernel Easel Elevation of Privilege Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, of which the Kernel Easel driver is a kernel driver. Kernel Easel driver is one of the kernel drivers. A privilege elevati...

Microsoft Windows Storage Services Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Windows Storage Services is one of the system storage services. An elevation of privilege vulnerability exists in Microsoft Windows Storage Services, which arises from the program's failure to properl...

Microsoft Windows Common Log File System Driver Elevation of Privilege Vulnerability (CNVD-2018-05736)

Microsoft Windows is a series of operating systems released by Microsoft.Windows Common Log File SystemCLFS driver is one of the common log file system drivers. A privilege vulnerability exists in the Microsoft Windows CLFS driver, which arises from the program's failure to properly handle object...

CVE-2018-1417

Under certain circumstances, a flaw in the J9 JVM IBM SDK, Java Technology Edition 7.1 and 8.0 allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823...

Code injection

Under certain circumstances, a flaw in the J9 JVM IBM SDK, Java Technology Edition 7.1 and 8.0 allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823...

CVE-2018-1417

CVE-2018-1417 : A flaw in the IBM J9 VM within IBM SDK Java Technology Edition 7.1 and 8.0 can allow untrusted code running under a security manager to elevate privileges. IBM X-Force ID: 138823. CVSSv3 base score 8.1 (HIGH) with network attack vector, no authentication, and all impact metrics at...

PT-2018-1112

Name of the Vulnerable Software and Affected Versions NoMachine versions 6.0.66 2 and earlier Description The issue is related to an uninitialised stack variable in the nxfuse component of the Open Source DokanFS library. This can allow a local low-privileged user to gain elevation of privileges ...

CVE-2016-8534

A remote privilege elevation vulnerability in HPE Matrix Operating Environment version 7.6 was found...

CVE-2016-8534

A remote privilege elevation vulnerability in HPE Matrix Operating Environment version 7.6 was found...

CVE-2018-0820

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are...

CVE-2017-13273

In xtqtaguid.c, there is a race condition due to insufficient locking. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-65853158...

CVE-2018-0756

The Windows kernel in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Kernel Elevation of Privilege Vulnerability". This CVE is unique from...

CVE-2016-8534: Undefined Security Weakness

A remote privilege elevation vulnerability in HPE Matrix Operating Environment version 7.6 was found...

PT-2018-5556

Name of the Vulnerable Software and Affected Versions: Android kernel Description: A race condition exists in the Android kernel due to insufficient locking in xt qtaguid.c. This issue could lead to a local elevation of privileges without requiring additional execution privileges. User interactio...

PT-2018-5027

Name of the Vulnerable Software and Affected Versions HPE Matrix Operating Environment version 7.6 Description A remote privilege elevation issue was discovered. Recommendations For HPE Matrix Operating Environment version 7.6, at the moment, there is no information about a newer version that...

SUSE-SU-2018:0437-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information t...