Archive
29 November 2016
Vulnerabilities first published on this day (UTC), newest first.
9 results · Feed
-
Unscored —
libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by …
-
Unscored —
In framework/modules/core/controllers/expCommentController.php of Exponent CMS 2.4.0, content_id input is passed into s…
-
Unscored —
There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MyS…
-
Unscored —
A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrati…
-
Unscored —
During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Inter…
-
Unscored —CVE-2016-1247 Public exploit
The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LT…
-
Unscored —
Dell iDRAC7 and iDRAC8 devices with firmware before 2.40.40.40 allow authenticated users to gain Bash shell access thro…
-
Unscored —
Administrative Server in Micro Focus Host Access Management and Security Server (MSS) and Reflection for the Web (RWeb)…
-
High 8.8
Improper Access Control in Apache Hadoop
In Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3, a remote user who can authenticate with the HDFS NameNode can possibly run arbitrary commands with the same privileges as the HDFS service.