CVE-2018-9474

In writeToParcel of MediaPlayer.java, there is a possible serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9474

creationtimestamp| type| source ---|---|--- 2024-11-20 17:35:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113516486623466921 2024-11-20 19:36:25+00:00| seen| https://t.me/cvedetector/11648...

CVE-2018-9474

CVE-2018-9474 is a local elevation-of-privilege in Android’s Media Framework, triggered by a serialization/deserialization mismatch in MediaPlayer.writeToParcel. Affected software includes Android 7.0–9; exploited via crafted media content with no user interaction. The issue is documented in the ...

Exploit for OS Command Injection in Paloaltonetworks Pan-Os

🌟 CVE-2024-9474 Exploit Tool 🌟 🔧 Usage...

CVE-2024-9474 PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface

A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability...

CVE-2024-9474

creationtimestamp| type| source ---|---|--- 2024-11-18 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2024-9474 2024-11-18 14:29:11+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113504429682120533 2024-11-18 15:31:43+00:00| seen|...

VulnCheck KEV: CVE-2024-9474

Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators...

RHEL 6 : mpfr (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - mpfr: buffer overflow in mpfrstrtofr CVE-2014-9474 Note that Nessus has not tested for this issue but has instead...

RHEL 7 : mpfr (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - mpfr: buffer overflow in mpfrstrtofr CVE-2014-9474 Note that Nessus has not tested for this issue but has instead...

SUSE CVE-2014-9474

Buffer overflow in the mpfrstrtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to incorrect documentation for mpnsetstr...

Mageia: Security Advisory (MGASA-2015-0021)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9474)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9474 advisory. - btrfs: fix NULL pointer dereference when deleting device by invalid id Qu Wenruo Orabug: 33281078 CVE-2021-3739 - net: qrtr: fix another OOB Read...

Advisory ROSA-SA-2021-1924

Software: mpfr 3.1.1 OS: Cobalt 7.9 CVE-ID: CVE-2014-9474 CVE-Crit: CRITICAL CVE-DESC: Buffer overflow in mpfrstrtofr function in GNU MPFR before 3.1.2-p11 allows context-sensitive attackers to have undefined impact via vectors associated with incorrect documentation for mpnsetstr. CVE-STATUS:...

SUSE: Security Advisory (SUSE-SU-2015:0208-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-9474

The SG 150-0 Smart Gateway from S.Siedle & Soehne is affected prior to version 1.2.4. A remote code execution exists via the backup function in the web frontend, and an attacker with network access can escalate to root on the gateway. Remediation: upgrade to version 1.2.4 or later (as cited in CN...

CVE-2019-9474

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-79996267...

CVE-2019-9474

CVE-2019-9474 : Affects Android 10 devices’ Bluetooth stack. The issue is an out-of-bounds read caused by a missing bounds check in Bluetooth, enabling remote information disclosure without user interaction. Exploitation details are not provided in the connected documents beyond the high-level de...

Huawei EulerOS: Security Advisory for mpfr (EulerOS-SA-2017-1293)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-9474

The CVE-2015-9474 issue affects the WordPress Simpolio theme (version 1.3.2), where insufficient restrictions on option updates enable privilege escalation. The public sets show that an attacker with any authenticated user can trigger the vulnerability by manipulating theme options (e.g., default...

Fedora 30 : 1:ytnef (2019-7d7083b8be)

ytnef 1.9.3 release, fixing a number of security issues : - CVE-2017-9470 - CVE-2017-9471 - CVE-2017-9474 - CVE-2017-9058 - CVE-2017-12142 - CVE-2017-12141 - CVE-2017-12144 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...