Tim Brown

The issue allows a non-privileged local user to exploit a vulnerability in the AIX runtime services library, specifically due to the lack of neutralization of special elements used in the operating system command, to execute arbitrary commands. This is related to the `errlog()` system call function in the runtime services library of the IBM AIX operating system.

The issue exists due to the lack of neutralization of special elements used in the invscout command of the IBM AIX operating system. Exploitation of this issue may allow an attacker to execute arbitrary commands. A non-privileged local user could exploit the vulnerability in the invscout command.

A shared memory permissions issue exists, allowing an attacker to access shared memory without specific permissions, potentially triggering the vulnerability.

The issue is related to directories with improper permissions, which could allow a local user with special access to gain root privileges.

The issue is related to a buffer overflow that could allow a local user to overwrite DB2 files or cause a denial of service.

The issue allows local users to gain privileges via a symlink attack. This is due to an incomplete fix for a previous issue.

The issue allows local users to gain privileges via a symlink attack.

The issue concerns the hardware VPN client's failure to validate the remote VPN endpoint identity through the checking of the endpoint's SSL key before initiating the exchange. This allows remote attackers to perform a replay attack.

The issue is related to a lack of protection for service data in Mozilla Firefox. It allows a remote attacker to obtain sensitive hostname information by constructing a crafted web site that sends an NTLM request and reads the Workstation field of an NTLM type 3 message. This can be done when NTLM v1 is enabled for HTTP authentication.

The issue is related to an untrusted search path vulnerability. It allows local users to gain privileges via a Trojan horse program.

The issue allows remote attackers to inject arbitrary web script or HTML via a crafted URI using various schemes, which is not properly handled in an error message. The affected schemes include `zip`, `trash`, `tar`, `thumbnail`, `smtps`, `smtp`, `smb`, `remote`, `recentdocuments`, `nntps`, `nntp`, `network`, `mbox`, `ldaps`, `ldap`, `fonts`, `file`, `desktop`, `cgi`, `bookmarks`, or `ar`.

The issue allows local users to gain privileges via unknown vectors when Glance is used. It is related to a privilege escalation vulnerability in HP xglance. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue allows local users to gain privileges by providing an arbitrary program name as a command-line argument to `/sbin/ifwatchd`.

The vulnerability may lead to a breach of confidentiality, integrity, and availability of protected information. It can be exploited remotely. The QSharedMemory class in Qt uses weak permissions for shared memory segments, allowing local users to read sensitive information or modify critical program data.

The issue is related to a heap-based buffer overflow in the Perl repeatcpy function, which can be exploited by context-dependent attackers. This can lead to a denial of service due to memory consumption and crash, or potentially allow the execution of arbitrary code. The exploitation is possible via the 'x' string repeat operator.

The issue allows remote attackers to execute arbitrary commands via specific fields in an OMP request. This is due to a problem in the send to sourcefire function in manage sql.c.

The issue is related to a use-after-free vulnerability in the khtml/rendering/render replaced.cpp file. This vulnerability can be triggered when the context menu is shown and an iframe is being updated, allowing remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.

The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, via a crafted web page. This is related to trying to reuse a frame with a null part.

The issue allows remote attackers to cause a denial of service and possibly read memory via large canvas dimensions, leading to an unexpected sign extension and a heap-based buffer over-read. Multiple vulnerabilities in the kdelibs package may lead to a violation of confidentiality and availability of protected information. These vulnerabilities can be exploited remotely.

The issue concerns multiple vulnerabilities in the kdelibs package, which can lead to a disruption of confidentiality and availability of protected information. These vulnerabilities can be exploited remotely. The CSS parser in Konqueror is also affected, allowing remote attackers to cause a denial of service and possibly read memory via a crafted font face source, related to type confusion.