The vulnerability of the Cisco Nexus 5000 software allows a malicious actor to trigger buffer overflows.

The buffer overflow in the implementation of the Smart Call Home function in Cisco NX-OS for Cisco Unified Computing System UCS switches and Nexus devices, as well as in Cisco CG-OS for Cisco Connected Grid series 1000 routers, allows remote SMTP servers to execute arbitrary code using specially...

The vulnerability of Cisco Nexus 7000 software allows a malicious actor to trigger buffer overflows.

The buffer overflow in the implementation of the Smart Call Home function in Cisco NX-OS for Cisco Unified Computing System UCS switches and Nexus devices, as well as in Cisco CG-OS for Cisco Connected Grid series 1000 routers, allows remote SMTP servers to execute arbitrary code using specially...

Android Security Bulletin—July 2016Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Alongside the bulletin, we have released a security update to Nexus devices through an over-the-air OTA update. The Nexus firmware images have also been released to the Google Developer site...

The vulnerability of Cisco Nexus 7000 software allows a malicious individual to increase their privileges.

The vulnerability in Cisco NX-OS devices of the Nexus 7000 series – where multiple virtual device contexts VDC are enabled, along with local authentication – allows remote users who have passed authentication to elevate their privileges within an unplanned VDC environment. This is achieved by usi...

The vulnerability of Cisco Nexus 7000 software allows a malicious individual to execute arbitrary code.

The GNU Bash command shell, as of version 4.3 and later, incorrectly handles lines that follow the declaration of a function exported as a variable. This allows a malicious actor to execute arbitrary code by interfering with environment variables. Security researchers have confirmed that this...

The vulnerability of the Cisco Nexus 5000 software allows a malicious individual to execute arbitrary code.

The GNU Bash command shell, as of version 4.3 and later, incorrectly handles lines that follow the declaration of a function exported as a variable. This allows a malicious actor to execute arbitrary code by interfering with environment variables. Security researchers have confirmed that this...

The vulnerability of Cisco Nexus 1000V software allows a malicious actor to execute arbitrary code.

The GNU Bash command shell, as of version 4.3 and later, incorrectly handles lines that follow the declaration of a function exported as a variable. This allows a malicious actor to execute arbitrary code by interfering with environment variables. Security researchers have confirmed that this...

American Auto-Matrix Front-End Solutions Vulnerabilities

OVERVIEW Independent researcher Maxim Rupp has identified a local file inclusion and a plain text storage of password vulnerabilities in American Auto-Matrix’s Building Automation Front-End Solutions application. The Aspect-Matrix hardware platform was made end of life in 2015 and will no longer...

CVE-2016-3769

The NVIDIA video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28376656...

CVE-2015-8892

platform/msmshared/bootverifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to bypass intended access restrictions via a digest with trailing data, aka Android internal bug 28822807 and Qualcomm internal bug CR902998...

CVE-2016-2503

The Qualcomm GPU driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28084795 and Qualcomm internal bug CR1006067...

CVE-2016-3775

The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X, Nexus 6, Nexus 6P, Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28588279...

CVE-2014-9795

app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not properly check for an integer overflow, which allows attackers to bypass intended access restrictions via crafted start and size values, aka Android internal bug 28820720 and Qualcomm internal bu...

CVE-2016-3768

The Qualcomm performance component in Android before 2016-07-05 on Nexus 5, 6, 5X, 6P, and 7 2013 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28172137 and Qualcomm internal bug CR1010644...

nexus-distribution.com XSS vulnerability

Vulnerable URL: http://www.nexus-distribution.com/index.php?option=comgooglesearchcse=30=85=partner-pub-0174056451165365%3Akpak8zjh85q=FORID%3A11=ISO-8859-1=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2Fopenbugbounty%2F%29%3E=Search=en=active=https%3A%2F%2Fwww.google.com Details: Description| Value...

Android Qualcomm Sound Driver Elevation of Privilege Vulnerability (CNVD-2016-04087)

Android on Nexus 5 is a Linux-based open source operating system for the Nexus 5 smartphone developed by Google and the Open Handset Alliance OHA, and includes a Qualcomm Sound Driver. Qualcomm Sound Driver is a sound driver developed by Qualcomm Incorporated. An elevation of privilege...

Android NVIDIA camera driver elevation of privilege vulnerability (CNVD-2016-04112)

Android on Nexus 9 is an open source operating system that runs on the Nexus 6 and is based on Linux. A security vulnerability in the NVIDIA camera driver for Android on Nexus 9 allows an attacker to exploit the vulnerability to build special applications with elevated privileges...

Android NVIDIA Camera Driver Elevation of Privilege Vulnerability

Android on Nexus 9 is an open source operating system that runs on the Nexus 6 and is based on Linux. A security vulnerability in the NVIDIA camera driver for Android on Nexus 9 allows an attacker to exploit the vulnerability to build special applications with elevated privileges...

Android Qualcomm Wi-Fi Driver Elevation of Privilege Vulnerability (CNVD-2016-04086)

Android on Nexus 7 is an open source Linux-based operating system for the Nexus 7 Tablet PC developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Wi-Fi driver is a Qualcomm-developed Wi-Fi driver component used in it. Qualcomm Wi-Fi driver is one of the components used in the...

Android Qualcomm Sound Driver Elevation of Privilege Vulnerability (CNVD-2016-04088)

Android on Nexus 6 is an open source Linux-based operating system for the Nexus 6 smartphone developed by Google and the Open Handset Alliance OHA, in which Qualcomm Sound Driver is a Qualcomm-developed sound driver. Qualcomm Sound Driver is a sound driver developed by Qualcomm Incorporated. An...