CVE-2017-0410

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

CVE-2017-0417

An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

CVE-2017-0414

An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does...

DEBIAN-CVE-2017-5546

The freelist-randomization feature in mm/slab.c in the Linux kernel 4.8.x and 4.9.x before 4.9.5 allows local users to cause a denial of service duplicate freelist entries and system crash or possibly have unspecified other impact in opportunistic circumstances by leveraging the selection of a...

EMC Data Domain OS Local Command Injection Vulnerability (ESA-2016-160)

EMC Data Domain OS is prone to a local command injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-0395

An elevation of privilege vulnerability in Contacts could enable a local malicious application to silently create contact information. This issue is rated as Moderate because it is a local bypass of user interaction requirements access to functionality that would normally require either user...

CVE-2016-8450

An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-8464

An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current...

CVE-2016-8449

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

CVE-2016-8407

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising ...

PT-2017-1211

Name of the Vulnerable Software and Affected Versions MediaTek driver versions affected versions not specified Description The issue is related to insufficient access control in the MT6573FDVT SetRegHW function of the camera fdvt.c driver for the MediaTek application in the Android operating...

UBUNTU-CVE-2016-8399

An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and current compiler...

Boxoft Wav v1.1.0.0 - Buffer Overflow Vulnerability

Document Title: =============== Boxoft Wav v1.1.0.0 - Buffer Overflow Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2027 Release Date: ============= 2017-01-09 Vulnerability Laboratory ID VL-ID: ==================================== 2027...

UBUNTU-CVE-2016-10010

sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c...

Multiple Apple products libarchive component rewrite vulnerability

Apple iOS, watchOS, macOS, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; watchOS is a smartwatch operating system. libarchive is a multi-format archive and compression library component. A security vulnerability exists in the libarchive compone...

Huawei Smart Phone P9 Wi-FI Driver Local Buffer Overflow Vulnerability

Huawei Smart Phone P9 is a smartphone from Chinese company Huawei.Wifi Driver is its wireless card driver. A local buffer overflow vulnerability exists in versions prior to Huawei Smart Phone P9 EVA-AL10C00B352. A local attacker can exploit this vulnerability to run arbitrary code, elevate...

Viscosity OpenVPN 2.3 Privilege Escalation Vulnerability

Viscosity Open VPN version 2.3 suffers from an unquoted service path local privilege escalation vulnerability. Title : Viscosity Open VPN 2.3 Privilege Escalation Author : Ajay Gowtham aka AJOXR Tested on : Windows 10 Latest version x64 bit Software :...

CVE-2016-6720

An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels. This issue is...

Viscosity Open VPN 2.3 Privilege Escalation

Title : Viscosity Open VPN 2.3 Privilege Escalation Date : 28/11/2016 Author : Ajay Gowtham aka AJOXR Tested on : Windows 10 Latest version x64 bit Software : https://www.sparklabs.com/downloads/Viscosity%20Installer.exe Vulnerability Description: When the Viscosity VPN software is installed a...

SA134 : Linux Kernel Vulnerabilities Oct/Nov 2016

SUMMARY Blue Coat products that include a vulnerable version of the Linux kernel are susceptible to several vulnerabilities. A remote attacker, with access to the management interface, can exploit these vulnerabilities to cause denial of service through system crashes or have unspecified other...