538 matches found
Admin Tools Pro, 5.0.2, Information Disclosure
Admin Tools Pro by Akeeba, versions 5.0.2 and previous, Information Disclosure Resolution: update to 5.1.0 Update notice: https://www.akeebabackup.com/news/1693-admin-tools-security-bulletin-may-2018.html...
CVE-2017-1701
Summary: CVE-2017-1701 affects IBM Rational Team Concert / RTC (IBM Engineering Workflow Management) versions 5.0–6.0.5. The root cause is the use of a weak encryption algorithm to store user credentials, enabling an authenticated user to obtain highly sensitive information. Impact: credential le...
Hashicorp vagrant-vmware-fusion local elevation of privilege vulnerability
Hashicorp vagrant-vmware-fusion is a tool for building and managing virtual machine environments on VMware virtual machines developed by HashiCorp, USA. vagrant update is one of the update processes. A security vulnerability exists in the vagrant update process in Hashicorp vagrant-vmware-fusion...
Hashicorp vagrant-vmware-fusion 5.0.1 - Local Privilege Escalation
Hashicorp vagrant-vmware-fusion 5.0.1 - Local Privilege Escalation I recently blogged about how the installation process of version 5.0.0 of this plugin could be hihacked by a local attacker or malware in order to escalate privileges to root. Hashicorp pushed some mitigations for this issue fairl...
Hashicorp vagrant-vmware-fusion 5.0.1 Local Privilege Escalation
I recently blogged about how the installation process of version 5.0.0 of this plugin could be hihacked by a local attacker or malware in order to escalate privileges to root. Hashicorp pushed some mitigations for this issue fairly quickly but unfortunately 5.0.1 is still exploitable with a...
Hashicorp vagrant-vmware-fusion 5.0.1 - Local Privilege Escalation
I recently blogged about how the installation process of version 5.0.0 of this plugin could be hihacked by a local attacker or malware in order to escalate privileges to root. Hashicorp pushed some mitigations for this issue fairly quickly but unfortunately 5.0.1 is still exploitable with a...
Android Media framework libhevc denial of service vulnerability (CNVD-2017-34652)
Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with the Media framework libhevc as a decoding library for multimedia development. libhevc is one of the hevc decoding...
CVE-2017-0860
An elevation of privilege vulnerability in the Android system inputdispatcher. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-31097064...
CVE-2017-0852
A denial of service vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0. Android ID: A-62815506...
CVE-2017-0860
An elevation of privilege vulnerability in the Android system inputdispatcher. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-31097064...
CVE-2017-0841
A remote code execution vulnerability in the Android system libutils. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37723026...
CVE-2017-0839
An information disclosure vulnerability in the Android media framework libeffects. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64478003...
CVE-2017-0860
An elevation of privilege vulnerability in the Android system inputdispatcher. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-31097064...
CVE-2017-0852
A denial of service vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0. Android ID: A-62815506...
CVE-2017-0848
An information disclosure vulnerability in the Android media framework libeffects. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64477217...
CVE-2017-0836
A remote code execution vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64893226...
CVE-2017-0845
A denial of service vulnerability in the Android framework syncstorageengine. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35028827...
CVE-2017-0845
A denial of service vulnerability in the Android framework syncstorageengine. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35028827...
Information disclosure
An information disclosure vulnerability in the Android media framework libeffects. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64477217...