CVE-2018-15376 Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write Vulnerabilities

A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected device. The vulnerability is due to the...

Google Patches Critical Vulnerabilities in Android OS

Google patched six critical remote code execution flaws in its Android operating system as part of its October Android Security Bulletin. Four of those remote code execution flaws are tied to Android’s Media framework and impact a wide range of Android devices including Google’s Pixel and Nexus...

PT-2018-13004

Name of the Vulnerable Software and Affected Versions Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers affected versions not specified Description A vulnerability in the embedded test subsystem could allow an authenticated, local attacker to write arbitrary values to...

PT-2018-13005

Name of the Vulnerable Software and Affected Versions Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers affected versions not specified Description A vulnerability in the embedded test subsystem could allow an authenticated, local attacker to write arbitrary values to...

CVE-2017-7804: Improper Input Validation

The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious code in concert with another vulnerability to write arbitrary data to an attacker controlled location in memory. This can be used to bypass existing memory protections in this situation. Note: This...

CVE-2016-10442: Improper Access Control

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640, SDM630, MSM8976, MSM8937, SDM845, MSM8976, and MSM8952, when running module or kernel code with improper access control allowing writing to arbitrary regions of memory, the user may utilize this...

PT-2018-2538

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.10 Wireshark versions 2.6.0 through 2.6.4 Description The issue is related to errors in handling input data in the LBMPDM dissector of the Wireshark network traffic analyzer. Exploitation of this issue coul...

PT-2018-1230

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to insufficient access control in the Qualcomm Access Control component of the Android operating system. This can be exploited by a remote attacker to...

openSUSE: Security Advisory for clamav (openSUSE-SU-2018:0825-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED12 / SLES12 Security Update : clamav (SUSE-SU-2018:0809-1)

This update for clamav fixes the following issues: Security issues fixed : - CVE-2012-6706: VMSFDELTA filter inside the unrar implementation allows an arbitrary memory write bsc1045315. - CVE-2017-6419: A heap-based buffer overflow that can lead to a denial of service in libmspack via a crafted C...

K7 Antivirus Premium elevation of privilege vulnerability (CNVD-2018-02140)

K7 Antivirus Premium is a suite of anti-virus software from K7 Computing India. A security vulnerability exists in versions of K7 Antivirus Premium prior to 15.1.0.53. A local attacker can exploit the vulnerability by performing a write operation to an arbitrary memory location with the help of a...

CVE-2017-16556

In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations...

PT-2018-6291

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by writing to arbitrary memory locations via a specific set of IOCTL calls. Recommendations: For versions prior to 15.1.0.53, update...

PT-2018-6289

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by writing to arbitrary memory locations via a specific set of IOCTL calls. Recommendations: For versions prior to 15.1.0.53, update...

PT-2018-6293

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by writing to arbitrary memory locations via a specific set of IOCTL calls. Recommendations: For versions prior to 15.1.0.53, update...

CVE-2017-16556: Improper Input Validation

In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations...

PT-2018-6295

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to write to arbitrary memory locations using user-controlled input. Recommendations: For versions prior to 15.1.0.53, update to version 15.1.0.53 or...

CVE-2017-16550: Undefined Security Weakness

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

PT-2018-6287

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by writing to arbitrary memory locations via a specific set of IOCTL calls. Recommendations: For versions prior to 15.1.0.53, update...

CVE-2017-8150

The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an arbitrary memory write vulnerability due to the lack of parameter validation. An attacker wi...