64353 matches found
CVE-2017-13308
In tscpuwriteGPIOout and mtktsAbtswrite of mtktsAbts.c, there is a possible buffer overflow in an sscanf due to improper input validation. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
Cisco NX-OS Command Injection (CVE-2017-12330)
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker could exploit this vulnerability by injecting...
Cisco NX-OS Improper Encoding or Escaping of Output (CVE-2017-12340)
A vulnerability in Cisco NX-OS System Software running on Cisco MDS Multilayer Director Switches, Cisco Nexus 7000 Series Switches, and Cisco Nexus 7700 Series Switches could allow an authenticated, local attacker to access the Bash shell of an affected device's operating system, even if the Bash...
Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras Use of Password Hash Instead of Password For Authentication (CVE-2017-7927)
A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH- IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC- HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH- HCVR5XXX,...
Cisco NX-OS Command Injection (CVE-2017-12339)
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker could exploit this vulnerability by injecting...
Cisco NX-OS Improper Input Validation (CVE-2017-12338)
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to read the contents of arbitrary files. The vulnerability is due to insufficient input validation for a specific CLI command. An attacker could exploit this vulnerability by issuing a crafted...
CVE-2017-13320
In impeg2dbitstreamflush of libmpeg2dec there is a possible OOB read due to a missing bounds check. This could lead to Remote DoS with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2017-13321
creationtimestamp| type| source ---|---|--- 2024-11-27 21:33:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113557057115965450...
CVE-2017-13320
creationtimestamp| type| source ---|---|--- 2024-11-27 21:33:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113557057082618478...
CVE-2017-13321
The CVE-2017-13321 issue affects Android’s SensorService::isDataInjectionEnabled in frameworks/native/services/sensorservice/SensorService.cpp, where a missing bounds check can cause an out-of-bounds read. This leads to local information disclosure with no user interaction and without additional ...
CVE-2017-13320
In impeg2dbitstreamflush of libmpeg2dec there is a possible OOB read due to a missing bounds check. This could lead to Remote DoS with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2017-13320
In impeg2dbitstreamflush of libmpeg2dec there is a possible OOB read due to a missing bounds check. This could lead to Remote DoS with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2017-13319
creationtimestamp| type| source ---|---|--- 2024-11-27 20:01:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113556698498666294...
CVE-2017-13319
In pvmp3getmaindatasize of pvmp3getmaindatasize.cpp, there is a possible buffer overread due to a missing bounds check. This could lead to remote information disclosure of global static variables with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2017-13319
CVE-2017-13319 is a buffer overread in the Android Media framework (pvmp3_get_main_data_size) that can lead to remote information disclosure without user interaction. The Android Pixel/Nexus bulletin lists CVE-2017-13319 under Media framework with updated AOSP versions 7.0, 7.1.1, 7.1.2, 8.0, 8.1...
CVE-2017-13319
In pvmp3getmaindatasize of pvmp3getmaindatasize.cpp, there is a possible buffer overread due to a missing bounds check. This could lead to remote information disclosure of global static variables with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2017-13316
creationtimestamp| type| source ---|---|--- 2024-11-27 19:23:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113556547151706282...
CVE-2017-13316
CVE-2017-13316 affects the Android RecognitionService.java: a missing permission check in checkPermissions could allow a local attacker to bypass permissions and escalate privileges without extra execution privileges or user interaction. The Red Hat and NVD/NVD-derived entries confirm the same de...
CVE-2017-17106
creationtimestamp| type| source ---|---|--- 2024-11-26 15:14:49+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113549907612268148 2025-09-12 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-09-12 2025-09-15 00:00:00+00:00| seen| The Shadowserver...