Plum Mobile Compass Input Validation Error Vulnerability

Plum Mobile Compass is an Android-based smartphone from Plum Mobile USA. The com.android.settings package in Plum Mobile Compass build fingerprint is PLUM/c179hwf221/c179hwf221:6.0/MRA58K/W16.51.5-22:user/release-keys versionCode=23, versionName=6.0-eng.root.20161223.224055 contains a security...

CVE-2018-15003

The Coolpad Defiant Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys and the T-Mobile Revvl Plus Coolpad/alchemy/alchemy:7.1.1/143.14.171129.3701A-TMO/buildfnj02-206:user/release-keys Android devices contain a pre-installed platform app with a package name of...

Design/Logic Flaw

The Coolpad Defiant Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys and the T-Mobile Revvl Plus Coolpad/alchemy/alchemy:7.1.1/143.14.171129.3701A-TMO/buildfnj02-206:user/release-keys Android devices contain a pre-installed platform app with a package name of...

Design/Logic Flaw

The Essential Phone Android device with a build fingerprint of essential/mata/mata:8.1.0/OPM1.180104.166/297:user/release-keys contains a pre-installed platform app with a package name of com.ts.android.hiddenmenu versionName=1.0, platformBuildVersionName=8.1.0 that contains an exported activity...

Design/Logic Flaw

The Plum Compass Android device with a build fingerprint of PLUM/c179hwf221/c179hwf221:6.0/MRA58K/W16.51.5-22:user/release-keys contains a pre-installed platform app with a package name of com.android.settings versionCode=23, versionName=6.0-eng.root.20161223.224055 that contains an exported...

CVE-2018-14989

The Plum Compass Android device with a build fingerprint of PLUM/c179hwf221/c179hwf221:6.0/MRA58K/W16.51.5-22:user/release-keys contains a pre-installed platform app with a package name of com.android.settings versionCode=23, versionName=6.0-eng.root.20161223.224055 that contains an exported...

CVE-2018-15003

The Coolpad Defiant Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys and the T-Mobile Revvl Plus Coolpad/alchemy/alchemy:7.1.1/143.14.171129.3701A-TMO/buildfnj02-206:user/release-keys Android devices contain a pre-installed platform app with a package name of...

CVE-2018-15003

CVE-2018-15003 affects Coolpad Defiant and T-Mobile Revvl Plus devices with a pre-installed platform app com.qualcomm.qti.telephony.extcarrierpack (versionCode=25, versionName=7.1.1) containing an exported UiccReceiver that allows any app on the device to trigger a factory reset. The initiating a...

CVE-2018-14999

The Leagoo P1 device with a build fingerprint of sp7731c1h1032v4bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed platform app with a package name of com.wtk.factory versionCode=1, versionName=1.0 that contains an exported broadcast receiver named...

CVE-2018-14994

CVE-2018-14994 affects the Essential Phone on Android 8.1.0 where a pre-installed platform app (package: com.ts.android.hiddenmenu) exposes an activity (com.ts.android.hiddenmenu.rtn.RTNResetActivity) that can initiate a factory reset from any co-located app without permissions. This could lead t...

CVE-2018-14989

The Plum Compass Android device with a build fingerprint of PLUM/c179hwf221/c179hwf221:6.0/MRA58K/W16.51.5-22:user/release-keys contains a pre-installed platform app with a package name of com.android.settings versionCode=23, versionName=6.0-eng.root.20161223.224055 that contains an exported...

iSCSI unauthorized access vulnerability, tens of thousands of iSCSI are likely to be affected-vulnerability warning-the black bar safety net

! Overview iSCSI Internet Small Computer System Interface Internet small computer system interface, also known as IP-SAN, is an Internet-based and SCSI-3 protocols storage technology, by the IETF, proposed, and 2003 2 May 11, became the official standard. 2019 4 December 17, white cap sinks a...

Intel SSD Firmware Denial of Service - US

Lenovo Security Advisory: LEN-26626 Potential Impact: Denial of service Severity: Moderate Scope of Impact: Industry-wide CVE Identifier: CVE-2017-5695 Summary Description: Intel has notified Lenovo of a vulnerability, requiring physical drive access, in the Intel® SSD 540s, Intel® Pro 5400s,...

Intel SSD Firmware Denial of Service - Lenovo Support US

No description provided...

Google DLP Makes It Easier to Safeguard Sensitive Data Troves

Google's Data Loss Prevention tool finds and redacts sensitive data in the cloud. A new user interface makes now makes it more broadly accessible...

PT-2019-5742 · Openjpeg +3 · Openjpeg +3

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 2.3.1 Description: The issue is related to a heap buffer overflow in the color apply icc profile function, located in bin/common/color.c. This can be exploited by a remote attacker to access confidential data,...

CVE-2019-8320

A Directory Traversal issue was discovered in RubyGems 2.7.6 and later through 3.0.2. Before making new directories or touching files which now include path-checking code for symlinks, it would delete the target destination. If that destination was hidden behind a symlink, a malicious gem could...

OTRS 5.x <= 5.0.31, 6.x <= 6.0.13 Data Loss Vulnerability

OTRS is prone to a data loss vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:otrs:otrs"; if description...

MySpace loses 12 years worth of photos, songs & video files

By Waqas MySpace says it happened during a server migration project. Last time the once prominent social network website MySpace made headlines in 2016 after it suffered a massive data breach in which personal data of 427 million users including emails and passwords was stolen and leaked online...

DEBIAN-CVE-2018-20800

An issue was discovered in Open Ticket Request System OTRS 5.0.31 and 6.0.13. Users updating to 6.0.13 also patchlevel updates or 5.0.31 only major updates will experience data loss in their agent preferences table...