Lucene search
+L

6140 matches found

Cvelist
Cvelist
•added 2017/03/08 1:00 a.m.•41 views

CVE-2017-0494

An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions:...

5.3AI score0.00556EPSS
SaveExploits0References3
Mend
Mend
•added 2017/03/08 1:00 a.m.•5 views

CVE-2017-0476

A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as High due to the possibility of remote code execution within the context of an unprivileged...

8.5CVSS0.01049EPSS
SaveExploits0References4
Mend
Mend
•added 2017/03/08 1:00 a.m.•5 views

CVE-2017-0494

An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions:...

6.8CVSS0.00556EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2017/03/08 12:00 a.m.•7 views

PT-2017-1443

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description A remote code execution issue in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Hig...

7.8CVSS0.01049EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/03/08 12:00 a.m.•10 views

CVE-2017-0476: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as High due to the possibility of remote code execution within the context of an unprivileged...

7.8CVSS6.4AI score0.01049EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/03/08 12:00 a.m.•7 views

PT-2017-1426

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description The issue is related to an information disclosure problem in the AOSP Messaging component of the Android operating system, which is caused by a lack of protection for internal data. This could all...

5.5CVSS0.00556EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/03/08 12:00 a.m.•9 views

CVE-2017-0494: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions:...

5.5CVSS5.9AI score0.00556EPSS
SaveExploits0References2
osv_alpine
osv_alpine
•added 2017/03/04 3:59 a.m.•12 views

ALPINE-CVE-2017-6472

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rtmpt.c by properly incrementing a certain sequence value...

7.5CVSS7.2AI score0.02667EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2017/03/04 3:59 a.m.•21 views

DEBIAN-CVE-2017-6472

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rtmpt.c by properly incrementing a certain sequence value...

7.5CVSS7.9AI score0.02667EPSS
SaveExploits0References1
Hacker One
Hacker One
•added 2017/03/02 8:17 p.m.•26 views

HackerOne: Transitioning a Private Program to Public Does Not Clear Previously Private Updates to Hackers

Summary: Transitioning a private program to public does not clear the previously private updates to hackers Description Include Impact: If you are managing a private bug bounty program and choose to message hackers in the program with a targeted bounty campaign or other limited / private messagin...

6.7AI score
SaveExploits0
CNVD
CNVD
•added 2017/02/27 12:00 a.m.•8 views

Trend Micro InterScan Messaging Security Remote Code Execution Vulnerability

Trend Micro InterScan Messaging Security is a hybrid SaaS email security solution. A remote command execution vulnerability exists in Trend Micro InterScan Messaging Security. It allows remote attackers to run arbitrary commands with root privileges...

7.6AI score
SaveExploits0References1
hackapp
hackapp
•added 2017/02/20 8:43 a.m.•14 views

Messaging - Dynamic Code Loading, Exported ContentProvider, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Messaging published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2017/02/20 8:38 a.m.•24 views

8sms (Stock Messaging, KitKat) - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 8sms Stock Messaging, KitKat published at the 'play' market has multiple vulnerabilities...

1.1AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2017/02/20 8:36 a.m.•26 views

Messaging SMS + MMS - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Messaging SMS + MMS published at the 'play' market has multiple vulnerabilities...

0.4AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2017/02/20 8:34 a.m.•15 views

SMS Messaging (AOSP) - Exported ContentProvider, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application SMS Messaging AOSP published at the 'play' market has multiple vulnerabilities...

0.6AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2017/02/19 8:27 p.m.•22 views

Messaging kitkat 4.4 - Dynamic Code Loading, Exported ContentProvider, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Messaging kitkat 4.4 published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2017/02/19 8:26 p.m.•21 views

SR Messaging - ContentProvider mode not defined, Customized SSL, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application SR Messaging published at the 'play' market has multiple vulnerabilities...

0.8AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2017/02/19 8:22 p.m.•12 views

Messaging Lite G - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Messaging Lite G published at the 'play' market has multiple vulnerabilities...

0.4AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2017/02/19 8:12 p.m.•17 views

Messaging Lollipop 5.0 (AOSP) - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Messaging Lollipop 5.0 AOSP published at the 'play' market has multiple vulnerabilities...

1.1AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2017/02/19 8:11 p.m.•23 views

Free SMS Messaging Android - Dangerous filesystem permissions, Insecure KeyStore, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Free SMS Messaging Android published at the 'play' market has multiple vulnerabilities...

1.4AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder