OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

UBUNTU-CVE-2017-1000117

A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim...

The vulnerability of the WordPad text editor on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the WordPad text editor on the Windows operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially created file...

OpenJDK: insufficient access control checks in ThreadPoolExecutor (Libraries, 8172204)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

The vulnerability of Broadcom’s Wi-Fi driver for Android operating systems allows attackers to increase their privileges.

The vulnerability of Broadcom’s Wi-Fi driver in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges locally...

The vulnerability of the Windows operating system allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Windows operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted PDF file...

The vulnerability of the software interface of the Android operating system’s Framework, allowing a hacker to inject arbitrary code

The vulnerability of the software interface of the Android operating system’s Framework is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to inject arbitrary code remotely, using a local malicious application...

CVE-2017-10805

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in the OAuth module allows remote authenticated users to hijack OAuth sessions of other users...

The vulnerability of the libhevc library in the Mediaserver application of the Android operating system allows a hacker to cause service failure, device freezing, and reloading of the device.

The vulnerability of the libhevc library in the Mediaserver application of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures, device freezes, and reboots by using a specially created file...

The vulnerability of the Mediaserver application in the Android operating system allows a hacker to cause a service failure, freeze the device, and force it to restart.

The vulnerability of the Mediaserver application in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures, device freezes, and reboots of the device using a specially created file...

The vulnerability of the Linux operating system’s kernel debugger FIQ allows a hacker to execute arbitrary code.

The vulnerability of the Linux operating system’s kernel debugger FIQ is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code in the kernel context, using a local malicious application...

The vulnerability of the libvpx library in the Mediaserver application of the Android operating system allows a hacker to cause a service failure, device freezing, and reloading of the device.

The vulnerability of the libvpx library in the Mediaserver application of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures, device freezes, and reboots by using a specially created file...

The vulnerability of the MediaTek driver for the Android operating system, allowing a hacker to inject arbitrary code

The vulnerability of the MediaTek driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a hacker to inject arbitrary code using a local malicious application...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of NVIDIA’s I2C HID driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary malicious code within the kernel context. This issue is considered “high” because it requires...

The vulnerability of the audio driver of the MediaTek Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the audio driver of the MediaTek Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code within the kernel context, through the use of a local maliciou...

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2017-11801)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A security vulnerability exists in IBM Sterling B2B Integrato...