Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash) via vectors involving an application that passes crafted input to the GPU driver.
Format string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code.
Directory traversal vulnerability in configure_manage.php in SeaWell Networks Spectrum SDC 02.05.00.
SeaWell Networks Spectrum SDC 02.05.00 has a default password of “admin” for the “admin” account.
Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864.
Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner.
SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions.
Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /.
Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068.
Firejail does not properly clean environment variables, which allows local users to gain privileges.