Microsoft Windows Kernel 'Win32k.sys' CVE-2015-2366 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5.0 Avaya CallPilot 5.0....

Microsoft Windows Kernel 'Win32k.sys' CVE-2015-2381 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to disclose kernel memory and obtain sensitive information that may aid in further attacks. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5...

SQLite Default Value Authorization Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SQLite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of DEFAULT...

The vulnerability of the ZENworks Configuration Management software allows a perpetrator to execute arbitrary code.

The vulnerability of the ZENworks Configuration Management information system exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted directory name specified ...

Cisco Prime Network Control System Elevation of Privilege Vulnerability

Cisco Prime Infrastructure is an all-in-one package that provides complete infrastructure wired and wireless and mobile lifecycle management provisioning, monitoring, troubleshooting, fixing, and reporting. A security vulnerability exists in the Cisco Prime Network Control System that allows...

HP SiteScope Log Analysis Tool Remote Privilege Escalation (uncredentialed check)

The HP SiteScope application running on the remote host is affected by a privilege escalation vulnerability due to a failure to restrict the log path within the Log Analysis Tool. A remote, authenticated attacker can exploit this flaw to read the 'users.config' file, allowing an attacker to...

abrt: default abrt event scripts lead to information disclosure

It was found that the ABRT event scripts created a user-readable copy of an sosreport file in ABRT problem directories, and included excerpts of /var/log/messages selected by the user-controlled process name, leading to an information disclosure. The fix for this issue prevents non-privileged use...

Microsoft Windows Kernel 'Win32k.sys' CVE-2015-1725 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows 8 for 32-bit...

Microsoft Windows Kernel Mode Driver CVE-2015-1720 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems SP1 Microsof...

Microsoft Windows Kernel 'Win32k.sys' CVE-2015-1721 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems SP1...

WordPress WP Membership Plugin Security Bypass Vulnerability

WordPress is a set of blogging platform developed using the PHP language, supporting personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the WordPress WP Membership plugin that allows remote attackers to exploit the vulnerability to bypass security restrictions a...

Django 'session.flush()' Security Bypass Vulnerability

Django is an open source web application framework using the Python language . An error in the Django 'session.flush' function allows remote attackers to bypass security restrictions and gain access to restricted accounts...

Microsoft Windows Service Control Manager Elevation of Privilege Vulnerability

Microsoft Windows is a popular operating system. A security vulnerability exists in Microsoft Windows that allows authenticated users to run special program elevations of privilege and invoke restricted target SCMs due to a failure of the Service Control Manager to properly calibrate the emulatio...

Microsoft Windows Kernel CVE-2015-1674 Local Security Bypass Vulnerability

Description Microsoft Windows is prone to a local security-bypass vulnerability. A local attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Windows 8 for 32-bit Systems Microsoft Windows 8 for 64-bit Systems...

Management: Limited RBAC authorization bypass

It was discovered that the Role Based Access Control RBAC implementation did not sufficiently verify all authorization conditions that are required by the Maintainer role to perform certain administrative actions. An authenticated user with the Maintainer role could use this flaw to add, modify, ...

Red Hat 389 Directory Server modrdn Security Bypass Vulnerability

Red Hat 389 Directory Server formerly known as Fedora Directory Server is an enterprise-class Linux directory server from Red Hat. The server fully supports the LDAPv3 specification and features scalability, multi-master replication, and more. A security bypass vulnerability exists in Red Hat 389...

Sensio Labs Symfony Security Bypass Vulnerability

Sensio Labs Symfony is a free French Sensio Labs , based on the MVC architecture of the PHP development framework . The framework provides commonly used functional components and tools , can be used to quickly create complex WEB program . A security bypass vulnerability exists in Sensio Labs...

Apache Tomcat Connectors Information Disclosure Vulnerability

Apache Tomcat is a free open source Java Servlet and JSP service program maintained by the Apache Foundation. An information disclosure vulnerability exists in Apache Tomcat Connectors versions prior to 1.2.41. It allows remote attackers to disclose restricted data via unspecified vectors...

F5 Networks BIG-IP : Rsync vulnerability (SOL15549)

rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module's hierarchy. C Tenable Network Security, Inc. The descriptive text a...

[SECURITY] Fedora 22 Update: groovy-sandbox-1.8-1.fc22

This project defines a Groovy CompilationCustomizer, which allows a program to execute Groovy script in a restricted sandbox environment. It is useful for applications that want to provide some degree of scriptability to users, without allowing them to execute System.exit0 or any other undesirabl...