64 matches found
CVE-2012-3495
The physdevgetfreepirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the return value of the getfreepirq function as an array index without checking that the return value indicates an error, which allows guest OS users to cause a denial of service invali...
CVE-2008-3298
SocialEngine (SE) prior to 2.83 is affected. The vulnerability arises from write privileges for templates, enabling remote authenticated administrators to execute arbitrary PHP code. There is no remediation detail provided in the supplied documents. Impact is limited to code execution by privileg...
i965 DRM allows insecure packets
The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets, allows local users with access to an X11 session and Direct Rendering Manager DRM to write to arbitrary memory locations and gain privileges via a crafted batchbuffer...
Solaris 7.0 - 'chkperm' Local Privilege Escalation
source: https://www.securityfocus.com/bid/295/info Solaris 2.4, 2.5, and 2.5.1 possibly other versions have a package called FACE Framed Access Command Environment installed. Included in the package is a program called chkperm which checks a file to see if the user has permission to use the FACE...