Lucene search
+L

1944 matches found

CVE
CVE
added 2017/01/23 9:00 p.m.105 views

CVE-2016-9379

The CVE-2016-9379 issue affects the Xen pygrub boot loader emulator: when S-expression output is requested, string quotes and S-expressions in the bootloader config can cause information disclosure (read/delete host files) and potential privilege escalation. The vulnerability is caused by delimit...

7.9CVSS7.2AI score0.00441EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2017/01/23 9:00 p.m.46 views

CVE-2016-9379

The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes and S-expressions in the bootloader configuration file...

7.3AI score0.00441EPSS
SaveExploits0References6
OSV
OSV
added 2017/01/23 7:59 a.m.12 views

CVE-2017-5554

An issue was discovered in ABOOT in OnePlus 3 and 3T OxygenOS before 4.0.2. The attacker can reboot the device into the fastboot mode, which could be done without any authentication. A physical attacker can press the "Volume Up" button during device boot, where an attacker with ADB access can iss...

8.1CVSS5.8AI score0.02997EPSS
SaveExploits1References3
Prion
Prion
added 2017/01/13 4:59 p.m.31 views

Privilege escalation

An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. This issue is rated as High because it is a local permanent denial of service device interoperability: completely permanent or requiring re-flashing the entir...

4.9CVSS7.2AI score0.00383EPSS
SaveExploits2References3Affected Software1
UbuntuCve
UbuntuCve
added 2017/01/13 4:59 p.m.38 views

CVE-2016-8467

An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. This issue is rated as High because it is a local permanent denial of service device interoperability: completely permanent or requiring re-flashing the entir...

5.5CVSS6.7AI score0.00383EPSS
SaveExploits2References2
OSV
OSV
added 2017/01/13 4:59 p.m.14 views

CVE-2016-8467

An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. This issue is rated as High because it is a local permanent denial of service device interoperability: completely permanent or requiring re-flashing the entir...

5.5CVSS6AI score0.00383EPSS
SaveExploits2References3
OSV
OSV
added 2017/01/13 4:59 p.m.22 views

UBUNTU-CVE-2016-8467

An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. This issue is rated as High because it is a local permanent denial of service device interoperability: completely permanent or requiring re-flashing the entir...

5.5CVSS6.7AI score0.00383EPSS
SaveExploits2References3
NVD
NVD
added 2017/01/13 4:59 p.m.33 views

CVE-2016-8467

An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. This issue is rated as High because it is a local permanent denial of service device interoperability: completely permanent or requiring re-flashing the entir...

5.5CVSS5.5AI score0.00383EPSS
SaveExploits2References3
CVE
CVE
added 2017/01/13 4:00 p.m.104 views

CVE-2016-8467

CVE-2016-8467 describes a local elevation-of-privilege flaw in the Nexus bootloader that lets an attacker change the boot mode via fastboot (e.g., fastboot oem config bootmode bp-tools), thereby gaining access to the device and potentially hidden USB interfaces. The described attack alters the an...

5.5CVSS6.2AI score0.00383EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2017/01/13 4:00 p.m.46 views

CVE-2016-8467

An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. This issue is rated as High because it is a local permanent denial of service device interoperability: completely permanent or requiring re-flashing the entir...

5.9AI score0.00383EPSS
SaveExploits2References3
NVD
NVD
added 2017/01/12 8:59 p.m.26 views

CVE-2016-8461

An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as High because it could be used to access sensitive data. Product: Android. Versions: Kernel-3.18. Android ID: A-32369621...

5.5CVSS4.6AI score0.00332EPSS
SaveExploits0References2
NVD
NVD
added 2017/01/12 8:59 p.m.27 views

CVE-2016-8462

An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as High because it could be used to access sensitive data. Product: Android. Versions: N/A. Android ID: A-32510383...

5.5CVSS4.6AI score0.00306EPSS
SaveExploits1References4
OSV
OSV
added 2017/01/12 8:59 p.m.9 views

CVE-2016-8461

An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as High because it could be used to access sensitive data. Product: Android. Versions: Kernel-3.18. Android ID: A-32369621...

5.5CVSS5.8AI score0.00332EPSS
SaveExploits0References2
OSV
OSV
added 2017/01/12 8:59 p.m.11 views

CVE-2016-8462

An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as High because it could be used to access sensitive data. Product: Android. Versions: N/A. Android ID: A-32510383...

5.5CVSS5.8AI score0.00306EPSS
SaveExploits1References4
OSV
OSV
added 2017/01/12 8:59 p.m.12 views

CVE-2016-8422

An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

7.8CVSS6.1AI score0.00601EPSS
SaveExploits0References2
Prion
Prion
added 2017/01/12 8:59 p.m.24 views

Information disclosure

An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as High because it could be used to access sensitive data. Product: Android. Versions: N/A. Android ID: A-32510383...

2.1CVSS5.7AI score0.00306EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2017/01/12 8:59 p.m.25 views

CVE-2016-8422

An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

9.3CVSS7.2AI score0.00601EPSS
SaveExploits0References2
OSV
OSV
added 2017/01/12 8:59 p.m.11 views

CVE-2016-8423

An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

7.8CVSS6.1AI score0.00601EPSS
SaveExploits0References2
Prion
Prion
added 2017/01/12 8:59 p.m.21 views

Privilege escalation

An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

9.3CVSS7.3AI score0.00601EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2017/01/12 8:59 p.m.25 views

Information disclosure

An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as High because it could be used to access sensitive data. Product: Android. Versions: Kernel-3.18. Android ID: A-32369621...

2.1CVSS5.7AI score0.00332EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder