The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by. Rated medium severity (CVSS 6.9). Public exploit code available and EPSS exploitation probability 73.9%.
Stack-based buffer overflow in the suhosin_encrypt_single_cookie function in the transparent cookie-encryption feature in the Suhosin extension before 0.9.33 for PHP, when suhosin.cookie.encrypt and. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable. Public exploit code available.
Buffer overflow in Bip 0.8.8 and earlier might allow remote authenticated users to execute arbitrary code via vectors involving a series of TCP connections that triggers use of many open file. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.