PT-2016-2632

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to a lack of unique identifier checks in the DCI client table of the diag driver in Qualcomm components for the Android operating system. This could allow a remote attacker ...

PT-2016-2631

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is caused by an integer underflow in the drivers/char/diag/diag dci.c file of the Qualcomm components in Android. This allows attackers to gain privileges or obtain sensitive informati...

CVE-2014-9876: Undefined Security Weakness

drivers/char/diag/diagfwd.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6, 6P, and 7 2013 devices mishandles certain integer values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28767796 and Qualcomm internal bug CR48340...

CVE-2014-9873: Undefined Security Weakness

Integer underflow in drivers/char/diag/diagdci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices allows attackers to gain privileges or obtain sensitive information via a crafted application, aka Android internal bug 28750726 and Qualcomm internal bug CR55686...

CVE-2014-9883: Integer Underflow (Wrap or Wraparound)

Integer overflow in drivers/char/diag/diagdci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices allows attackers to gain privileges or obtain sensitive information via a crafted application, aka Android internal bug 28769912 and Qualcomm internal bug CR565160...

PT-2016-2641

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is caused by an integer underflow in the diag driver of the Qualcomm components in Android. This allows attackers to gain privileges or obtain sensitive information via a crafted...

CVE-2015-8937: Undefined Security Weakness

drivers/char/diag/diagcharcore.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 6, and 7 2013 devices mishandles a socket process, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28803962 and Qualcomm internal bug CR770548...

CVE-2014-9863: Integer Overflow or Wraparound

Integer underflow in the diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices allows attackers to gain privileges or obtain sensitive information via a crafted application, aka Android internal bug 28768146 and Qualcomm internal bug CR549470...

CVE-2014-9872: Improper Input Validation

The diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not ensure unique identifiers in a DCI client table, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28750155 and Qualcomm internal bug CR590721...

CVE-2014-9784: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in drivers/char/diag/diagdebugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28442449 and Qualcomm internal bug CR585147...

PT-2016-3526

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 on Nexus 5 and 7 2013 devices Description The issue is related to multiple buffer overflows in the diag debugfs.c file within the Qualcomm components. This allows attackers to gain privileges by using a...

pfSense Firewall Cross-Site Request Forgery Vulnerability

pfSense is a free, open-source customized version of FreeBSD designed for use as a firewall and router. pfSense suffers from a cross-site request forgery vulnerability. diagbackup.php does not validate all functions sufficiently. Allows an attacker to upload malicious files...

IBM Security Guardium Access Privilege Vulnerability

IBM Security Guardium is a data activity monitor product from IBM USA. The product offers features such as automated controls for compliance and protection against internal and external threats. A security vulnerability exists in the diag script of IBM Security Guardium. A local attacker could...

CVE-2015-5043

diag in IBM Security Guardium 8.2 before p6015, 9.0 before p6015, 9.1, 9.5, and 10.0 before p6015 allows local users to obtain root access via unspecified key sequences...

CVE-2015-5043: Undefined Security Weakness

diag in IBM Security Guardium 8.2 before p6015, 9.0 before p6015, 9.1, 9.5, and 10.0 before p6015 allows local users to obtain root access via unspecified key sequences...

SUSE: Security Advisory for ppc64-diag (SUSE-SU-2014:0928-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-6510

Multiple cross-site scripting XSS vulnerabilities in pfSense before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 srctrack, 2 usemfstmpsize, or 3 usemfsvarsize parameter to systemadvancedmisc.php; the 4 port, 5 snaplen, or 6 count parameter to diagpacketcapture.php...

ppc64-diag: multiple temporary file races

Multiple insecure temporary file use flaws were found in the way the ppc64-diag utility created certain temporary files. A local attacker could possibly use either of these flaws to perform a symbolic link attack and overwrite arbitrary files with the privileges of the user running ppc64-diag, or...

ppc64-diag: multiple temporary file races

Multiple insecure temporary file use flaws were found in the way the ppc64-diag utility created certain temporary files. A local attacker could possibly use either of these flaws to perform a symbolic link attack and overwrite arbitrary files with the privileges of the user running ppc64-diag, or...

Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the ppc64-diag package of the SUSE Linux Enterprise operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...