31 matches found
CVE-2015-9156
CVE-2015-9156 covers a buffer overflow in Android when performing a high-speed Dual Carrier Downlink Data call in multicell environments on Qualcomm Snapdragon Mobile and Snapdragon Wear chipsets (MDM9206/9607/9635M/ MSM8909W/ SD 210/212/205/400/410/12/425/430/615/16/415/617/800/808/810; listed S...
CVE-2015-9156
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 800, SD 808, and SD 810, when making a high speed Dual Carrier...
CVE-2018-9156
AXIS P1354 IP camera (Firmware 5.90.1.1) is affected by CVE-2018-9156 due to an upload page that does not verify file types, enabling a webshell upload via fileUpload.shtml for a custom .shtml file. The shell can be interpreted by Apache mod_include (
CVE-2018-9156
An issue was discovered on AXIS P1354 IP camera Firmware version 5.90.1.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server modinclude modul...
CVE-2017-9156
CVE-2017-9156 affects AutoTrace 0.31.1. The vulnerability is in the library component libautotrace.a and relates to the routine in input-pnm.c:303:12 (pnm_load_ascii). An attacker can remotely trigger a denial of service resulting in an invalid write and a crash (SEGV). The available documents co...
CVE-2016-9156
Siemens SICAM PAS is affected (all versions prior to 8.09). A remote attacker could upload, download, or delete files in certain parts of the file system by sending specially crafted packets to port 19235/TCP. Mitigation: upgrade SICAM PAS to version 8.09 or later; apply network access controls t...
CVE-2014-9156
The vulnerability CVE-2014-9156 affects the Drupal FileField module (6.x-3.x) prior to 6.x-3.13. The root cause is a failing permission check to view files when attaching an uploaded file, enabling remote authenticated users with permission to create or edit content to read private files. Affecte...
SA-CONTRIB-2014-071 - FileField - Access bypass
The FileField module enables you to define and use fields that contain files. The module doesn't sufficiently check permission to view the attached file when attaching a file that was previously uploaded. This could allow attackers to gain access to private files. This vulnerability is mitigated ...
Fedora Update for libxcb FEDORA-2013-9156
Check for the Version of libxcb OpenVAS Vulnerability Test Fedora Update for libxcb FEDORA-2013-9156 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for libxcb FEDORA-2013-9156
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected",...
