CVE-2017-13194

A vulnerability in the Android media framework libvpx related to odd frame width. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64710201...

CVE-2017-13200

An information disclosure vulnerability in the Android media framework av related to id3 unsynchronization. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63100526...

CVE-2017-13209

In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller which could allow an application or service to replace a HAL service with its own service. This could lead to a local elevation of privilege enabling code...

CVE-2017-0846

An information disclosure vulnerability in the Android framework clipboardservice. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64934810...

CVE-2017-17841

Palo Alto Networks PAN-OS 6.1, 7.1, and 8.0.x before 8.0.7, when an interface implements SSL decryption with RSA enabled or hosts a GlobalProtect portal or gateway, might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack...

Google Android Media Framework elevation of privilege vulnerability (CNVD-2018-00635)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and MediaFramework is one of the frameworks used for multimedia development. An elevation of privilege vulnerability exists in Media Framework in Android versions 8.0 and 8.1. A...

Google Android System Component Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in Android versions 8.0 and 8.1. A remote attacker can exploit this vulnerability to execute arbitrary code...

Debian DSA-4079-1 : poppler - security update

Multiple vulnerabilities were discovered in the poppler PDF rendering library, which could result in denial of service or the execution of arbitrary code if a malformed PDF file is processed. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

CVE-2017-1699

IBM MQ Managed File Transfer Agent (IBM WebSphere MQ) 8.0/9.0 creates files with insecure permissions, enabling a local attacker to modify or delete those files with unknown impact. The related advisories cite the vulnerability as CVE-2017-1699 and provide remediation: WebSphere MQ 8.0.0.0–8.0.0....

CVE-2017-1557

CVE-2017-1557 affects IBM WebSphere MQ 8.0.0.0–8.0.0.7 and 9.0.0.0–9.0.0.1/9.0.1 CD–9.0.3 CD. An authenticated user with authority can send a specially crafted request that causes a channel process to cease processing further requests, effectively causing a denial of service. The IBM security bul...

CVE-2017-13178

In the initDecoder function of SoftAVCDec, there is a possible out-of-bounds write to mCodecCtx due to a use after free when buffer allocation fails. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for...

Debian DSA-4068-1 : rsync - security update

Several vulnerabilities were discovered in rsync, a fast, versatile, remote and local file-copying tool, allowing a remote attacker to bypass intended access restrictions or cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

CVE-2017-1760

IBM WebSphere MQ (IBM MQ) versions 7.5, 8.0, and 9.0 could allow a local user to crash the queue manager agent thread and expose sensitive information. Affected products/versions include MQ 7.5.0.0–7.5.0.8, MQ 8.0.0.0–8.0.0.6, MQ 9.0.0.0–9.0.0.1, MQ 9 CD (9.0.1–9.0.3), and MQ Appliance variants. ...

IBM WebSphere MQ Authentication Bypass Vulnerability (swg22005400)

IBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to access an object which they should have been denied access. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2017-1341

CVE-2017-1341 in IBM WebSphere MQ affects MQ 8.x and 9.x (including MQ Appliance) where, under certain conditions, an unauthorized user could access an object that should be denied. The root cause is the MQOPEN operation succeeding when it should fail due to generic profile authority matching for...

CVE-2017-13158

An information disclosure vulnerability in the Android system activitymanagerservice. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-32879915...

CVE-2017-13156

An elevation of privilege vulnerability in the Android system art. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-64211847...

Information disclosure

An information disclosure vulnerability in the Android media framework n/a. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65719872...

CVE-2017-0870

An elevation of privilege vulnerability in the Android framework libminikin. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-62134807...

Information disclosure

An information disclosure vulnerability in the Android system activitymanagerservice. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-32879915...