287 matches found
CVE-2021-0316
CVE-2021-0316 affects Android’s Bluetooth stack (AVRC) due to an out-of-bounds write in avrc_pars_vendor_cmd within avrc_pars_tg.cc caused by a missing bounds check. This leads to remote code execution over Bluetooth with no privileges and no user interaction required. Affected Android versions i...
CVE-2021-0316
creationtimestamp| type| source ---|---|--- 2021-01-10 11:55:23+00:00| seen| https://t.me/cyberbannewsir/2509 2026-07-12 22:00:16+00:00| seen| https://t.me/pleyadesit/8289 2026-07-13 00:00:40+00:00| seen| https://t.me/pleyadesit/8289 2026-07-14 00:00:51+00:00| seen| https://t.me/pleyadesit/8289...
CVE-2020-0316
In Telephony, there is a missing permission check. This could lead to local information disclosure of radio data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154934919...
CVE-2020-0316
In Telephony, there is a missing permission check. This could lead to local information disclosure of radio data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154934919...
CVE-2020-0316
CVE-2020-0316 affects Android 11, with a missing permission check in Telephony that could allow local disclosure of radio data without extra privileges or user interaction. The issue targets the Telephony component and is described across multiple sources as an information disclosure vulnerabilit...
CentOS: Security Advisory for emacs-git (CESA-2020:0316)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2019-0316
CVE-2019-0316 affects SAP NetWeaver Process Integration. The vulnerability arises from insufficient validation of user-controlled inputs in specific servlets, enabling a reflected Cross-Site Scripting (XSS) attack. An attacker with admin privileges can inject malicious scripts that are executed i...
Security Bulletin: Multiple security vulnerabilities affect the Lifecycle Query Engine (LQE) that is shipped with Jazz Reporting Service (CVE-2016-0316, CVE-2016-0317, CVE-2016-0318, CVE-2016-0319)
Summary There are multiple security vulnerabilities in the Lifecycle Query Engine LQE shipped with Jazz Reporting Service. Vulnerability Details CVEID: CVE-2016-0316 DESCRIPTION: IBM Jazz Reporting Service is vulnerable to cross-site scripting, caused by improper validation of user-supplied input...
CVE-2018-0316
Cisco IP Phone 6800/7800/8800 Series with Multiplatform Firmware are affected by CVE-2018-0316, where improper handling of errors during incoming SIP calls can cause the device to reload and trigger a temporary DoS. Affected releases are Multiplatform Firmware prior to 11.1(2). Exploitation invol...
CVE-2017-0316
GeForce Experience 3.x (GeForce Experience) On Windows, NVIDIA Installer Framework’s NVISystemService64 accepts user-supplied values without validation, affecting GeForce Experience 3.x prior to 3.10.0.55. This can lead to denial of service or privilege escalation. A fix is available in NVIDIA GF...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 6.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
CVE-2016-0316
IBM Jazz Reporting Service’s Lifecycle Query Engine (LQE) is affected by CVE-2016-0316 (XSS). Affected products: Jazz Reporting Service 6.0 and 6.0.1; 6.0.1 is vulnerable to all listed issues, while 6.0.2 is affected by CVE-2016-0316. The vulnerability arises from improper validation of user-supp...
CVE-2016-0316
Cross-site scripting XSS vulnerability in Lifecycle Query Engine LQE in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 and 6.0.2 before iFix003 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
Oracle: Security Advisory (ELSA-2014-0316)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Flash Player <= 16.0.0.296 Multiple Vulnerabilities (APSB15-04)
Binary data 8660.prm...
Adobe Flash Player Unspecified Vulnerability - 01 (Feb 2015) - Mac OS X
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...
CVE-2015-0316
Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-0314,...
CVE-2015-0316
Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-0314,...
Memory corruption
Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-0314,...