Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2017-03-14 CVE-2013-7460 Improper Access Control vulnerability in Mcafee Application Control and Change Control
A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part of the Application Control whitelist and allows execution of binaries via specific conditions.
local
low complexity
mcafee CWE-284
2.1
2017-03-14 CVE-2017-6896 Reliance on Cookies without Validation and Integrity Checking vulnerability in Digisol Dg-Hr1400 Router Firmware 1.00.02
Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value.
network
low complexity
digisol CWE-565
6.5
2017-03-14 CVE-2017-6516 Improper Input Validation vulnerability in Magnicomp Sysinfo 10H62
A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow a local attacker to gain elevated privileges.
local
low complexity
magnicomp CWE-20
7.2
2017-03-14 CVE-2017-5985 Missing Authorization vulnerability in Linuxcontainers LXC
lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.
local
low complexity
linuxcontainers CWE-862
2.1
2017-03-14 CVE-2017-3003 Use After Free vulnerability in Adobe Flash Player
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the ActionScript 2 Camera object.
network
low complexity
adobe CWE-416
8.8
2017-03-14 CVE-2017-3002 Use After Free vulnerability in Adobe Flash Player
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the variable property.
network
low complexity
adobe CWE-416
8.8
2017-03-14 CVE-2017-3001 Use After Free vulnerability in Adobe Flash Player
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM.
network
low complexity
adobe CWE-416
8.8
2017-03-14 CVE-2017-3000 Unspecified vulnerability in Adobe Flash Player
Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding.
network
low complexity
adobe
6.5
2017-03-14 CVE-2017-2999 Out-of-bounds Write vulnerability in Adobe Flash Player
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface.
network
low complexity
adobe CWE-787
8.8
2017-03-14 CVE-2017-2998 Out-of-bounds Write vulnerability in Adobe Flash Player
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to timeline interactions.
network
low complexity
adobe CWE-787
8.8