Symantec Workspace Streaming Agent Unquoted Service Path Local Elevation of Privilege

SUMMARY Symantec Workspace Streaming agents have an unquoted search path in the AppMgrService.exe which is installed as a service. This could potentially provide a non-privileged local user the ability to successfully insert arbitrary code in the root path. AFFECTED PRODUCTS Product | Version |...

KLA10530 JRE update for multiple VMware products

Multiple VMware products were updated to address vulnerabilities in Oracle Java. For details look at KLA10447. Original advisories VMSA advisory KLA10447 Exploitation Public exploits exist for this vulnerability. Related products VMware-unclassified-products CVE list CVE-2014-6593 warning Solutio...

Design/Logic Flaw

TYPO3 Neos 1.1.x before 1.1.3 and 1.2.x before 1.2.3 allows remote editors to access, create, and modify content nodes in the workspace of other editors via unspecified vectors...

PT-2015-5914

Name of the Vulnerable Software and Affected Versions TYPO3 Neos versions 1.1.x through 1.1.2 TYPO3 Neos versions 1.2.x through 1.2.2 Description The issue allows remote editors to access, create, and modify content nodes in the workspace of other editors. Recommendations For versions 1.1.x throu...

CVE-2015-2821: Undefined Security Weakness

TYPO3 Neos 1.1.x before 1.1.3 and 1.2.x before 1.2.3 allows remote editors to access, create, and modify content nodes in the workspace of other editors via unspecified vectors...

GNOME Shell security, bug fix, and enhancement update

clutter 1.14.4-12 - Include upstream patch to prevent a crash when hitting hardware limits Resolves: rhbz1115162 1.14.4-11 - Fix a typo in the Requires 1.14.4-10 - Add patch for quadbuffer stereo suppport Resolves: rhbz1108891 cogl 1.14.1-6 - Add patches for quadbuffer stereo suppport Resolves:...

CVE-2015-1605: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Dell ScriptLogic Asset Manager aka Quest Workspace Asset Manager before 9.5 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to 1 GetClientPackage.aspx or 2 GetProcessedPackage.aspx...

Dropbox Acquisitions: Privilege Escalation at invite feature @hackpad.com

Hey! I would like to report Privilege Escalation @hackpad.com's Invite feature. Description : Hackpad allows admin of the workspace to add/invite users for admin/member/guest etc roles. I can able to grant that access to any one with just one click. Attack Scenario: Lets say you have workspace...

CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

Design/Logic Flaw

plasma-workspace before 5.1.95 allows remote attackers to obtain passwords via a Trojan horse Look and Feel package...

CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

CVE-2015-1307

CVE-2015-1307 affects KDE Plasma-Workspace (plasma-workspace) prior to 5.1.95. The vulnerability arises from a Trojan horse Look and Feel package, enabling remote attackers to obtain passwords. The available connected documents corroborate the same description across multiple sources (SUSE, NVD/N...

CVE-2015-1308

CVE-2015-1308 affects kde-workspace 4.2.0 and plasma-workspace prior to 5.1.95. Affects KDE desktop components that manage the X server session; the underlying issue allows remote attackers with access to the X server while the screen is locked to observe input events and thereby obtain passwords...

CVE-2015-1307

plasma-workspace before 5.1.95 allows remote attackers to obtain passwords via a Trojan horse Look and Feel package...

CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

CVE-2015-1307: Improper Access Control

plasma-workspace before 5.1.95 allows remote attackers to obtain passwords via a Trojan horse Look and Feel package...

CVE-2015-1308: Exposure of Sensitive Information to an Unauthorized Actor

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

KDE Plasma-Workspace Security Bypass Vulnerability

KDE is an open source graphical desktop environment for UNIX. A security bypass vulnerability exists in KDE Plasma-Workspace, which allows attackers to bypass security restrictions and perform unauthorized operations...

PT-2015-5199

Name of the Vulnerable Software and Affected Versions plasma-workspace versions prior to 5.1.95 Description The issue allows remote attackers to obtain passwords by utilizing a Trojan horse Look and Feel package. Recommendations For versions prior to 5.1.95, update to version 5.1.95 or later to...