35 matches found
部分MediaTek芯片 安全漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in some MediaTek chips, which stems from a local privilege escalation due to a lack of privilege checking in vow. The following products are affected: MT6580, MT6735, MT6737, MT6739,...
部分MediaTek芯片 缓冲区错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in some MediaTek chips, which originates from an out-of-bounds write in apu due to a lack of boundary checking, which may result in local privilege escalation. The following products a...
MediaTek 芯片竞争条件问题漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips. An attacker could exploit the vulnerability to escalate privileges. The following products are affected: MT6879, MT6895, MT6983, MT8781...
MediaTek 芯片 安全漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which is caused by memory reuse after release. The following products are affected: MT6879, MT6895, MT6983...
CVE-2015-6895
CVE-2015-6895 entry is rejected and not used; it does not represent an active vulnerability.
CVE-2017-6895
CVE-2017-6895 concerns the USB Pratirodh tool, which is prone to an XML External Entity (XXE) injection via the usb.xml input. The underlying cause is the XML parser handling untrusted XML data in usb.xml insecurely, enabling XXE. Documented impacts include potential information disclosure and de...
USB Pratirodh XXE Injection
--001a113ff018269a92054ac84a6a Content-Type: text/plain; charset=UTF-8 Vulnerability Title: USB Pratirodh XML External Entity Injection Vulnerability Affected Product: USB Pratirodh Product Homepage: https://cdac.in/index.aspx?id=csepsusbpra CVE-ID : CVE-2017-6895 Severity: Medium Class: XXE...
majestic.com XSS vulnerability
Vulnerable URL: https://majestic.com/plans-pricing?" Details: Description| Value ---|--- Patched:| Yes, at 24.01.2017 Latest check for patch:| 24.01.2017 12:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6895 VIP website status:| Yes Check majestic.com SSL...
CVE-2016-6895
CVE-2016-6895 is a reservation duplicate of CVE-2016-5333 and refers to the same issue described for VMware Photon OS OVA 1.0. CVE-2016-5333 states that VMware Photon OS OVA 1.0 released prior to 2016-08-14 contained a default public SSH key in an authorized_keys file, enabling remote attackers t...
CVE-2014-6895
The CVE-2014-6895 entry affects the Android app Throne Rush (package com.progrestar.bft) version 2.3.10. The issue is that the application does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...
CVE-2008-6895
CVE-2008-6895 affects 3CX Phone System 6.0.806.0. The vulnerability enables remote attackers to cause a denial of service (unstable service or crash) via unspecified vectors, as demonstrated by Nessus/SAINT scans. The NVD metrics show a CVSSv2 base score of 7.8 (HIGH) with network access, no auth...
CVE-2006-6895
The CVE-2006-6895 entry concerns the Bluetooth stack in the Sony Ericsson T60. The issue stems from insufficient implementation of the Limited discoverable mode, allowing remote attackers to obtain unauthorized inquiry responses. The available documents do not provide exploit details, affected fi...