ZKTeco ZKAccess Professional 3.5.3 Insecure File Permissions

i? ZKTeco ZKAccess Professional 3.5.3 Insecure File Permissions Vendor: ZKTeco Inc. | Xiamen ZKTeco Biometric Identification Technology Co.,ltd Product web page: http://www.zkteco.com Affected version: 3.5.3 Build 0005 Summary: ZKAccess 3.5 is a desktop software which is suitable for small and...

ZKTeco ZKTime.Net 3.0.1.6 Insecure File Permissions

i? ZKTeco ZKTime.Net 3.0.1.6 Insecure File Permissions Vendor: ZKTeco Inc. | Xiamen ZKTeco Biometric Identification Technology Co.,ltd Product web page: http://www.zkteco.com Affected version: 3.0.1.6 3.0.1.5 160622 3.0.1.1 160216 Summary: ZKTime.Net V3.0 is a new generation time attendance...

Dolby Audio X2 elevation of privilege vulnerability in multiple Lenovo products

An elevation of privilege vulnerability exists in multiple Lenovo products Dolby Audio X2. A local attacker can exploit the vulnerability to run files with system privileges...

AVG Internet Security avgtdix.sys Elevation of Privilege Vulnerability

AVG Internet Security is anti-virus protection software. AVG Internet Security is implemented with a local elevation of privilege vulnerability in the handling of 0x534a600c IOCTL within the avgtdix driver and 0x53606148 IOCTL within the avgidsdriverx driver. An attacker can exploit this...

Cisco Firepower Management Center and ASA 5500-X Series with FirePOWER Services Elevation of Privilege Vulnerability

Cisco Firepower Management Center and Cisco ASA 5500-X Series with FirePOWER Services are both next-generation firewall software from Cisco. An elevation of privilege vulnerability exists in the web-based GUI in Cisco Firepower Management Center and Cisco ASA 5500-X Series with FirePOWER Services...

Ubuntu: Security Advisory (USN-3063-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Android on Nexus devices elevation of privilege vulnerability (CNVD-2016-06293)

Android on Nexus is Google's line of high-end phones powered by stock Android. Android before 2016-08-05 on Nexus 5 and 7 devices suffers from an elevation of privilege vulnerability that allows attackers to gain privileges through a crafted application...

Android on Nexus devices elevation of privilege vulnerability (CNVD-2016-06291)

Android on Nexus is Google's line of high-end phones powered by stock Android. Android before 2016-08-05 on Nexus 5 and 7 devices suffers from an elevation of privilege vulnerability that allows attackers to gain privileges through a crafted application...

Microsoft Kernel-Mode Drivers Multiple Privilege Elevation Vulnerabilities (3178466)

This host is missing an important security update according to Microsoft Bulletin MS16-098. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fontconfig Arbitrary Code Execution Vulnerability

fontconfig is a library of functions that provide system-wide font settings, customization and allow applications to access them. An arbitrary code execution vulnerability exists in fontconfig, which can be exploited to trigger an arbitrary free call, which can lead to a double free attack to...

CVE-2016-3311

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

MS16-101: Security update for Windows authentication methods: August 9, 2016

Resolves vulnerabilities in Windows that could allow elevation of privilege if an attacker runs a specially crafted application on a domain-joined system.Important This article contains information that shows you how to help lower security settings or how to turn off security features on a...

MS16-098: Security update for Windows kernel-mode drivers: August 9, 2016

Resolves vulnerabilities in Microsoft Windows that could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application that could exploit the vulnerabilities and take control of an affected system.SummaryThis security update resolves...

PT-2016-2632

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to a lack of unique identifier checks in the DCI client table of the diag driver in Qualcomm components for the Android operating system. This could allow a remote attacker ...

PT-2016-2536

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to inadequate access control in the Android kernel, allowing attackers to gain privileges via a crafted application. This can be exploited by a remote attacker to elevate...

Lenovo XClarity Administrator Local Lift Vulnerability

Lenovo XClarity Administrator is a centralized resource management solution from Lenovo in China. A local elevation of privileges vulnerability exists in Lenovo XClarity Administrator versions prior to 1.1.1. A local attacker can exploit this vulnerability to gain administrator privileges...

Multiple Apple Products IOHIDFamily Local Elevation of Privilege Vulnerability

Apple iOS is an operating system developed for mobile devices; OS X is a specialized operating system developed for Mac computers; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. A security vulnerability in IOHIDFamily in several Apple products allows a local...

Oracle Java SE Multiple Unspecified Vulnerabilities-01 (Jul 2016) - Windows

Oracle Java SE is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Overflow in UEFI Variable Reclaim Function - Lenovo Support US

No description provided...

PT-2016-2715

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.6 Description The issue is related to a denial of service caused by a NULL pointer dereference in the Audio component of Apple OS X. Additionally, there are reports of vulnerabilities in the login window and...