30 matches found
CVE-2015-7121
This CVE entry is rejected/not used; it does not represent an active vulnerability.
CVE-2016-9967
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7121...
Code injection
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7121...
CVE-2016-9967
CVE-2016-9967 affects the Telecom application receiver component on Samsung Note smartphones running Android L (5.0/5.1), M (6.0), and N (7.0). The issue is a lack of proper exception handling in those receivers, which can crash the system and potentially allow privilege escalation. The Samsung i...
CVE-2016-9967
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7121...
CVE-2014-7121
CVE-2014-7121 affects the Android Dhanam app (com.magzter.dhanam) version 3.1, where X.509 certificate validation for SSL/TLS is not performed. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The issue is documented across mult...
CVE-2008-7121
Cross-site scripting XSS vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the search bar...
CVE-2008-7121
CVE-2008-7121 describes an XSS vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier, where remote attackers can inject arbitrary web script or HTML through the search bar. The affected component is the SQL-PHP-based search functionality in the product, with exploitation relying on imprope...
CVE-2006-7121
The CVE-2006-7121 entry concerns the HTTP server in the Linksys SPA-921 VoIP Desktop Phone. The vulnerability allows remote attackers to trigger a denial of service (reboot) by sending an excessively long URL or overly long credentials during Basic Authentication. The available references documen...