7310 matches found
CVE-2016-0137
The Click-to-Run C2R implementation in Microsoft Office 2013 SP1 and 2016 allows local users to bypass the ASLR protection mechanism via a crafted application, aka "Microsoft APP-V ASLR Bypass."...
Microsoft Windows GDI Information Disclosure Vulnerability
Microsoft Windows is a family of operating systems released by Microsoft Corporation in the United States. Graphics Device Interface GDI is one of the graphics device interface components. An information disclosure vulnerability exists in the Graphics Device Interface in Microsoft Windows that...
CVE-2016-5927
IBM Tivoli Storage Manager for Space Management aka Spectrum Protect for Space Management 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is configured, allows local users to discover an encrypted password by reading application-trace output...
CVE-2016-5927
IBM Tivoli Storage Manager for Space Management aka Spectrum Protect for Space Management 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is configured, allows local users to discover an encrypted password by reading application-trace output...
Input validation
IBM Tivoli Storage Manager for Space Management aka Spectrum Protect for Space Management 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is configured, allows local users to discover an encrypted password by reading application-trace output...
CVE-2016-5927
IBM Tivoli Storage Manager for Space Management aka Spectrum Protect for Space Management 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is configured, allows local users to discover an encrypted password by reading application-trace output...
CVE-2016-5927
CVE-2016-5927 affects IBM Tivoli Storage Manager for Space Management (Spectrum Protect for Space Management) versions 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6. The root cause is that enabling application tracing for the dsmsetpw command can cause the trace output to rev...
If user is restricted to only view the space they should not be able to create or import a calendar
panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-48465. panel panel:title=23 July 2019 Update|bgColor=e7f4fa Hi everyone, thank you for your interest in this ticket. After...
[SECURITY] Fedora 23 Update: glibc-2.22-18.fc23
The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...
IBM Tivoli Storage Manager for Space Management Local Information Disclosure Vulnerability
IBM Tivoli Storage Manager is an ANSI SAN-compliant, scalable solution for discovering, monitoring, and managing enterprise SAN architecture components, as well as allocating and automating the manipulation of an enterprise's attached disk storage resources. A local information disclosure...
Failed job is marked as Successful on the Cloud Provider side
Challenge In some cases a SP backup server receives "Success" status of a tenant job even when the job has failed on the Tenant's server. Cause Generally, cloud job sessions are marked failed on the SP backup server in the following cases: All cloud gateways are unavailable There is not enough...
The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information
The vulnerability of the sound/soc/msm/qdsp6v2/msm-lsm-client.c file of the Qualcomm Android operating system is related to the lack of checks on certain user-space data. Exploiting this vulnerability can allow a malicious actor, acting remotely, to obtain confidential information through a...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the mdss mdp3 driver components of Qualcomm’s Android operating system is related to the lack of data validation for user space. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability in the Linux kernel version up to 3.11 on ARM-based Android platforms is related to improper handling of user space access to the TPIDRURW register. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...
Joyent SmartOS dtrace Information Disclosure Vulnerability
This vulnerability allows attackers to disclose sensitive information on vulnerable installations of Joyent SmartOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the dtrace...
Joyent SmartOS dtrace Information Disclosure Vulnerability
This vulnerability allows attackers to disclose sensitive information on vulnerable installations of Joyent SmartOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the dtrace...
[SECURITY] Fedora 25 Update: glibc-2.24-3.fc25
The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...
Kaspersky Internet Security KLIF Driver NtUserCreateWindowEx_HANDLER Denial of Service
Summary A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF driver. A specially crafted native api call request can cause a access violation exception in KLIF kernel driver resulting in local denial of service. An attacker can ru...
CVE-2016-4657
creationtimestamp| type| source ---|---|--- 2016-08-25 20:59:53+00:00| seen| MISP/57bf5c07-6b40-428e-8f68-4a9a02de0b81 2016-08-26 09:58:54+00:00| seen| MISP/57c0123c-d100-43a8-b874-54a8bce2ab96 2017-03-12 17:11:06+00:00| published-proof-of-concept| https://t.me/alexlitreevchannel/62 2017-03-13...
