Mobileye 5 - Series pro app - Dangerous filesystem permissions, Exported components, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Mobileye 5 - Series pro app published at the 'play' market has multiple vulnerabilities...

Huawei畅享5手机MTK平台存在输入校验漏洞(CNVD-2016-12840)

Huawei Think 5 is a smartphone from the Chinese company Huawei Huawei. An input validation vulnerability exists in the MTK platform of the Huawei Changsha 5 phone. An attacker may trick the user into installing a malicious application, which can exploit the vulnerability to send specific paramete...

Huawei Enjoy 5 cell phone MTK platform suffers from an integer overflow vulnerability

Huawei Think 5 is a smartphone from the Chinese company Huawei Huawei. An integer overflow vulnerability exists in the MTK platform of the Huawei Changsha 5 phone. An attacker may trick a user into installing a malicious application, and the application can exploit the vulnerability to send...

RHEL 5 : xen (RHSA-2016:2963)

An update for xen is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

RHEL 5 : kernel (RHSA-2016:2962)

An update for kernel is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Oracle Linux 5 : xen (ELSA-2016-2963)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2963 advisory. 3.0.3-148.el511 - xen-qemu-ioport-array-overflow.patch bz1401521 - Resolves: bz1401521 CVE-2016-9637 xsa199 xen: qemu ioport array overflow XSA-199 rhel-5.11.z...

Oracle Linux 5 : kernel (ELSA-2016-2962)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2962 advisory. kernel 2.6.18-417 - virt hv: do not lose pending heartbeat vmbus packets Vitaly Kuznetsov 1391167 - net Fix use after free in the recvmmsg exit path Davide...

Fedora 23 : golang (2016-7eea952041)

Security fix for BZ1401985 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Huawei cellular Wi-Fi driver suffers from input checksum vulnerability

Huawei Think 5 is a smartphone from the Chinese company Huawei Huawei. An input validation vulnerability exists in the Huawei Think 5 cellular Wi-Fi driver. An attacker could trick users into installing a malicious application, which could exploit the vulnerability to send specific parameters to...

Debian Security Advisory DSA 3737-1 (php5 - security update)

Several vulnerabilities were found in PHP, a general-purpose scripting language commonly used for web application development. The vulnerabilities are addressed by upgrading PHP to the new upstream version 5.6.29, which includes additional bug fixes. Please refer to the upstream changelog for mor...

CVE-2016-9585

It was found that the JMX endpoint of Red Hat JBoss EAP 5 deserializes the credentials passed to it. An attacker could use this flaw to cause a denial of service. Mitigation You should not expose Remote JMX on EAP 5, or SOA-P 5. To do that remove this system property from bin/run.conf, or...

CVE-2016-6711

A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the...

Information disclosure

An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels. This issue is...

Denial of service

A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the...

CVE-2016-6712

A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the...

CentOS Update for thunderbird CESA-2016:2850 centos5

Check the version of thunderbird SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882607";...

Threat Outbreak Alert RuleID26664: Email Messages Distributing Malicious Software on December 5, 2016

Medium Alert ID: 50969 First Published: 2016 December 5 17:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26664 may contain the following files: Name |...

Threat Outbreak Alert RuleID26716: Email Messages Distributing Malicious Software on December 5, 2016

Medium Alert ID: 50973 First Published: 2016 December 5 17:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26716 may contain the following files: Name |...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2016-2843)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-2843 advisory. 45.5.1-1.0.1 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files 45.5.1-1 - Updat...

Oracle Linux 5 / 6 / 7 : thunderbird (ELSA-2016-2825)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-2825 advisory. 45.5.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 45.5.0-1 - Update to 45.5.0 Tenable has extracted t...