Design/Logic Flaw

EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions on data access and server actions, via unspecified vectors...

CVE-2014-2506

EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions on data access and server actions, via unspecified vectors...

EMC Documentum D2 privilege escalation

It's possible to execute DQL Query with super-user privileges...

Pearson eSIS Enterprise Student Information System Stored XSS

Advisory ID: hag201477 Product: Pearson eSIS Enterprise Student Information System Vendor: PearsonVue Vulnerable Versions: Any version Advisory Publication: April 06, 2014 Vendor Notification: March 05, 2014 Public Disclosure: April 06, 2014 Vulnerability Type: Cross-Site Scripting CWE-79 CVE...

BlackBerry Z 10 Buffer Overflow

--------------------------------------------------------------------- modzero Security Advisory: BlackBerry Z 10 - Buffer Overflow in qconnDoor MZ-13-05 --------------------------------------------------------------------- --------------------------------------------------------------------- 1...

Pearson eSIS Enterprise Student Information System XSS

Advisory ID: hag201477 Product: Pearson eSIS Enterprise Student Information System Vendor: PearsonVue Vulnerable Versions: Any version Advisory Publication: April 06, 2014 Vendor Notification: March 05, 2014 Public Disclosure: April 06, 2014 Vulnerability Type: Cross-Site Scripting CWE-79 CVE...

Mac OS X Sudo Password Bypass Vulnerability

This Metasploit module gains a session with root permissions on versions of OS X with sudo binary vulnerable to CVE-2013-1775. Tested working on Mac OS 10.7-10.8.4, and possibly lower versions. If your session belongs to a user with Administrative Privileges the user is in the sudoers file and is...

Mac OS X Sudo Password Bypass

This module gains a session with root permissions on versions of OS X with sudo binary vulnerable to CVE-2013-1775. Tested working on Mac OS 10.7-10.8.4, and possibly lower versions. If your session belongs to a user with Administrative Privileges the user is in the sudoers file and is in the...

Debian Security Advisory DSA 2450-1 (samba)

The remote host is missing an update to samba announced via advisory DSA 2450-1. OpenVAS Vulnerability Test $Id: deb24501.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2450-1 samba Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

DSA-2450-1 samba - privilege escalation

Bulletin has no description...

EMC Documentum Content Server privilege escalation

System administrator can elevate privileges to super-user...

CVE-2011-4144

Unspecified vulnerability in EMC Documentum Content Server 6.0, 6.5 before SP2 P02, 6.5 SP3 before SP3 P02, and 6.6 before P02 allows local users to obtain "highest super user privileges" by leveraging system administrator privileges...

Design/Logic Flaw

Unspecified vulnerability in EMC Documentum Content Server 6.0, 6.5 before SP2 P02, 6.5 SP3 before SP3 P02, and 6.6 before P02 allows local users to obtain "highest super user privileges" by leveraging system administrator privileges...

CVE-2011-4144

CVE-2011-4144 affects EMC Documentum Content Server (versions: 6.0, 6.5 before SP2 P02, 6.5 SP3 before SP3 P02, 6.6 before P02). It enables local users with sysadmin-level access to elevate to the highest superuser privileges. The issue is documented with a privilege-elevation vector via system a...

Linux Kernel Auerswald USB设备驱动程序缓冲区溢出漏洞

BUGTRAQ ID: 48687 CVE ID: CVE-2009-4067 Linux Kernel是Linux操作系统的内核。 Linux Kernel的Auerswald USB设备驱动程序在实现上存在缓冲区溢出漏洞，远程攻击者可利用此漏洞以超级用户权限执行任意代码，从而完全控制受影响计算机。 Linux Kernel的Auerswald PBX/System Telephone USB驱动程序的实现中存在缓冲区溢出漏洞。 Linux kernel 2.6.26 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Apache Tomcat 6.0.x < 6.0.33 Multiple Vulnerabilities

Binary data 800602.prm...

Analysis of the postgresql database attack techniques II-vulnerability warning-the black bar safety net

You can see we broke up in a field for the name, then we continue incrementing the offset value, to obtain the other field, as shown in Figure 9 and 1=2 union select 1,columnname,'3','4' from informationschema. the columns where tablename='admins' offset 2 limit 1-- ! Figure 9 Field passowrd is...

OProfile Multiple Vulnerabilities

This host is installed OProfile and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboprofilemultvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ OProfile Multiple Vulnerabilities Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net...

OProfile <= 0.9.6 Multiple Vulnerabilities

OProfile is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:maynardjohnson:oprofile";...

Members of confluence-administrators receive notifications for comments and attachments on restricted pages

Members of the special confluence-administrators group have access to all content on the site, however they should not see restricted content in search results or get notifications about changes on restricted pages. There is a bug in the permission check for notifications about "contained" object...