Information disclosure

An information disclosure vulnerability in the Android media framework libeffects. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64477217...

Privilege escalation

An elevation of privilege vulnerability in the Android media framework mediaanalytics. Product: Android. Versions: 8.0. Android ID: A-65540999...

CVE-2017-0847

An elevation of privilege vulnerability in the Android media framework mediaanalytics. Product: Android. Versions: 8.0. Android ID: A-65540999...

CVE-2017-0858

Another vulnerability in the Android media framework n/a. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64836894...

CVE-2017-0835

A remote code execution vulnerability in the Android media framework libmpeg2. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63316832...

CVE-2017-0832

A remote code execution vulnerability in the Android media framework libmpeg2. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62887820...

CVE-2017-0836

A remote code execution vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64893226...

CVE-2017-0857

Another vulnerability in the Android media framework n/a. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65122447...

CVE-2017-0854

An information disclosure vulnerability in the Android media framework n/a. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63873837...

CVE-2017-0835

A remote code execution vulnerability in the Android media framework libmpeg2. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63316832...

CVE-2017-0842

CVE-2017-0842 is an Elevation of Privilege vulnerability in Android Bluetooth affecting Android 6.0–8.0. The issue allows a local attacker to gain privileges within the system Bluetooth stack. Public sources classify it as EoP with HIGH severity (CVSS v3 base 7.8). The vulnerability is documented...

CVE-2017-0832

A remote code execution vulnerability in the Android media framework libmpeg2. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62887820...

CVE-2017-0834

CVE-2017-0834 is a remote code execution vulnerability in Android’s media framework (libmpeg2) affecting Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0 (Android ID: A-63125953). The connected documents corroborate RCE in the Media Framework and list the affected versions; no explicit exp...

CVE-2017-0847

An elevation of privilege vulnerability in the Android media framework mediaanalytics. Product: Android. Versions: 8.0. Android ID: A-65540999...

CVE-2017-0834

A remote code execution vulnerability in the Android media framework libmpeg2. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63125953...

CVE-2017-0831

An elevation of privilege vulnerability in the Android framework window manager. Product: Android. Versions: 8.0. Android ID: A-37442941...

CVE-2017-0841

Removed by vendor...

Kodak InSite Cross-Site Scripting Vulnerability

Kodak InSite is a WEB-based application. Multiple cross-site scripting vulnerabilities exist in Kodak InSite versions 6.5 through 8.0. A remote attacker can inject arbitrary web script by sending the 'paramFile' parameter to the /Site/Troubleshooting/DiagnosticReport.asp file or...

CVE-2017-9085

Kodak InSite (versions 6.5–8.0) is affected by cross-site scripting (XSS) via the parameterFile parameter to two pages: /Site/Troubleshooting/DiagnosticReport.asp and /Site/Troubleshooting/SpeedTest.asp. The vulnerability allows remote attackers to inject arbitrary web scripts. The sources in the...

Debian DSA-4022-1 : libreoffice - security update

Marcin Noga discovered two vulnerabilities in LibreOffice, which could result in the execution of arbitrary code if a malformed PPT or DOC document is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...