2904 matches found
Privilege escalation
An elevation of privilege vulnerability in the NVIDIA libomx library libnvomx could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which...
Information disclosure
An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...
Information disclosure
An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...
CVE-2016-8400
CVE-2016-8400 describes an information-disclosure vulnerability in the NVIDIA librm library (libnvrm) on Android (Kernel 3.18). A local malicious application could read data outside its permission levels due to improper memory handling in LIBNVRM, potentially exposing sensitive data. The vulnerab...
CVE-2016-8409
CVE-2016-8409 is an information-disclosure vulnerability in the NVIDIA video driver on Android (Kernel-3.10). It could allow a local malicious app with access to a privileged process to read data outside its permission levels on affected devices (e.g., Nexus 9). The issue is labeled Moderate in s...
CVE-2016-8426
An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...
CVE-2016-6735
An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...
Privilege escalation
An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...
Privilege escalation
An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...
Cumulative update for Windows 10: October 11, 2016
None None...
Cumulative update for Windows 10 Version 1607 and Windows Server 2016: October 11, 2016
None None...
Cumulative update for Windows 10 Version 1511: October 11, 2016
None None...
October 2016 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2
October 2016 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1, and Windows Server 2012 R2: MS16-101 Security update for Windows authentication methods MS16-118 Cumulative security update for...
Moxa NPort 5232-N Serial-to-Ethernet Device Version Detection (SCADA)
Binary data 9575.prm...
WordPress N-Media Post Front-end Form Plugin <= 1.0 - Arbitrary File Upload Vulnerability
Arbitrary File Upload Vulnerability was found in WordPress N-Media Post Front-end Form Plugin v1.0. It only validates the file on client-side with JavaScript so the validation can be easily bypassed. Solution Update the plugin...
N-Media Website Contact Form with File Upload - Arbitrary File Upload
The website-contact-form-with-file-upload WordPress plugin was affected by an Arbitrary File Upload security vulnerability. PoC...
WordPress N-Media Website Contact Form Plugin - Arbitrary File Upload
The "upload.php" file can be uploaded to the /wp-content/uploads/contactfiles/ directory. Solution Update the plugin...
MyBB 1.8.6 - SQL Injection
MyBB 1.8.6 - SQL Injection Security Advisory - Curesec Research Team 1. Introduction Affected Product: MyBB 1.8.6 Fixed in: 1.8.7 Fixed Version Link: http://resources.mybb.com/downloads/mybb1807.zip Vendor Website: http://www.mybb.com/ Vulnerability Type: SQL Injection Remote Exploitable: Yes...
Cisco RV110W, RV130W, and RV215W Routers Command Shell Injection Vulnerability
A vulnerability in the command-line interface CLI command parser of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an authenticated, local attacker to inject arbitrary shell commands that are executed ...
Joshua Drake on Android Security Post-Stagefright
Joshua Drake of Zimperium Labs talks to Mike Mimoso about the last year post-Stagefright, the effectiveness of Google’s monthly patching cycle, and some of the security enhancements forthcoming in Android N. Download: JoshuaDrakeonPost-StagefrightAndroid.mp3 Music by Chris Gonsalves...