PT-2014-3534

Name of the Vulnerable Software and Affected Versions OpenStack Identity Keystone versions prior to 2014.1.1 Description The issue arises from improper handling of role assignments to groups with IDs identical to those of users, allowing remote authenticated users to gain privileges assigned to a...

PT-2013-4928 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.11.5 Description: The issue allows local users to bypass intended /proc/sys/net restrictions. This is due to the net ctl permissions function in net/sysctl net.c not properly determining uid and gid values,...

CVE-2011-1717

Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applications to read user IDs, contacts, phone numbers, date of birth, instant message logs, and other private information...