The (1) REST and (2) memcache interfaces in the Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 do not require authentication, which allows remote. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Authentication Bypass
Open Xchange Appsuite
NVD
CVSS 2.0
7.5
EPSS
0.5%
The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.11 performs a capability check in an incorrect namespace, which allows local users to gain privileges via PID spoofing. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. Public exploit code available.
Privilege Escalation
Linux
Linux Kernel
NVD
GitHub
CVSS 2.0
7.2
EPSS
0.0%