Lucene search
+L

798 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/12 12:00 a.m.•5 views

CVE-2016-8403: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising ...

4.7CVSS5.8AI score0.01037EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/12 12:00 a.m.•6 views

CVE-2016-8407: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising ...

4.7CVSS5.8AI score0.01037EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/12 12:00 a.m.•4 views

CVE-2016-8405: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising ...

4.7CVSS7AI score0.0169EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2017/01/12 12:00 a.m.•29 views

CVE-2016-8405

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising ...

4.7CVSS6.8AI score0.0169EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2017/01/12 12:00 a.m.•3 views

PT-2017-1202

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10 Description The issue is related to a lack of protection for service data in the Android operating system kernel, specifically in the ION subsystem, Binder, USB driver, and networking subsystem. This could allow a...

4.7CVSS0.01037EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2017/01/12 12:00 a.m.•2 views

PT-2017-1201

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10 Description The issue is related to a lack of protection for service data in the ION subsystem, Binder, USB driver, and network subsystem of the Android operating system kernel. This could allow a remote attacker t...

4.7CVSS0.01037EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2017/01/12 12:00 a.m.•5 views

PT-2017-1199

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description An information disclosure issue in kernel components, including the ION subsystem, Binder, USB driver, and networking subsystem, could allow a local malicious application to access data...

4.7CVSS0.01037EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2017/01/12 12:00 a.m.•2 views

PT-2017-1200

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description An information disclosure issue in kernel components, including the ION subsystem, Binder, USB driver, and networking subsystem, could allow a local malicious application to access data...

4.7CVSS0.01037EPSS
SaveExploits0References5
OSV
OSV
•added 2017/01/12 12:00 a.m.•14 views

UBUNTU-CVE-2016-8405

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising ...

4.7CVSS6.7AI score0.0169EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/12 12:00 a.m.•7 views

CVE-2016-8402: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising ...

4.7CVSS5.8AI score0.01037EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/01/12 12:00 a.m.•1 views

PT-2017-1203

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10 through Kernel-3.18 Description The issue is related to a lack of protection for service data in the Android operating system kernel, specifically in the ION subsystem, Binder, USB driver, and networking subsystem...

4.7CVSS0.01037EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2017/01/11 12:00 a.m.•2 views

PT-2017-1223

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10 through Kernel-3.18 Description The issue is related to a lack of protection for internal data in kernel components, including the ION subsystem, Binder, USB driver, and networking subsystem. This could allow a loc...

4.7CVSS0.0169EPSS
SaveExploits0References117
Huawei
Huawei
•added 2017/01/11 12:00 a.m.•30 views

Security Advisory - Camera DOS Vulnerability in ION Memory Management Module of Huawei Smart Phone

A denial of service DoS vulnerability exists in the ION memory management module of some Huawei mobile phones. An attacker may trick a user into installing a malicious app to send specific parameters to a Huawei mobile phone. Successful exploit could cause the system to restart. Vulnerability ID:...

7.1CVSS5.3AI score0.00555EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2016/12/08 9:59 p.m.•7 views

UBUNTU-CVE-2016-9120

Race condition in the ionioctl function in drivers/staging/android/ion/ion.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service use-after-free by calling IONIOCFREE on two CPUs at the same time...

7.8CVSS7.1AI score0.01736EPSS
SaveExploits0References5
CNVD
CNVD
•added 2016/12/08 12:00 a.m.•17 views

Linux Kernel Competitive Conditions Vulnerability (CNVD-2016-12202)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A contention condition vulnerability exists in the 'the ionioctl' function in the drivers/staging/android/ion/ion.c file in Linux kernel versions prior to 4.6. A local attacke...

9.3CVSS8.2AI score0.01736EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/12/08 12:00 a.m.•4 views

CVE-2016-9120: Use After Free

Race condition in the ionioctl function in drivers/staging/android/ion/ion.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service use-after-free by calling IONIOCFREE on two CPUs at the same time...

9.3CVSS5.8AI score0.01736EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2016/12/02 12:00 a.m.•29 views

Mozilla Firefox ESR < 45.5 Multiple Vulnerabilities

Binary data 9805.prm...

9.8CVSS7.3AI score0.12263EPSS
SaveExploits5References11
OSV
OSV
•added 2016/11/25 4:59 p.m.•20 views

CVE-2016-6737

An elevation of privilege vulnerability in the kernel ION subsystem in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise,...

7.8CVSS7.6AI score0.00649EPSS
SaveExploits0References2
OSV
OSV
•added 2016/11/25 4:59 p.m.•17 views

CVE-2016-6728

An elevation of privilege vulnerability in the kernel ION subsystem in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise,...

7.8CVSS7.6AI score0.01468EPSS
SaveExploits1References2
OSV
OSV
•added 2016/11/25 4:59 p.m.•17 views

UBUNTU-CVE-2016-6728

An elevation of privilege vulnerability in the kernel ION subsystem in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise,...

7.8CVSS7.5AI score0.01468EPSS
SaveExploits1References4
Rows per page
Query Builder