Lucene search
+L

5473 matches found

CNVD
CNVD
added 2018/01/16 12:00 a.m.10 views

Google Android Media framework (libavc) Information Disclosure Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with the Media framework libavc as a framework for multimedia development. is a framework used for multimedia...

9.1CVSS6.2AI score0.00684EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/16 12:00 a.m.9 views

Unspecified Vulnerability in Google Android Media framework (libavc)

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with the Media framework libavc as a framework for multimedia development. is a framework used for multimedia...

7.8CVSS6.6AI score0.00463EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/16 12:00 a.m.10 views

Google Android Media framework (libhevc) Information Disclosure Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with the Media framework libhevc as a decoding library for multimedia development. libhevc is one of the hevc decoding...

9.1CVSS6.2AI score0.00508EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/16 12:00 a.m.9 views

Unspecified vulnerability in Google Android Media framework (libhevc)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with the Media framework libhevc as a decoding library for multimedia development. libhevc is one of the hevc decoding...

7.8CVSS6.6AI score0.00463EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/16 12:00 a.m.13 views

Google Android Media framework (libavc) information disclosure vulnerability (CNVD-2018-01109)

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with the Media framework libavc as a framework for multimedia development. is a framework used for multimedia...

9.1CVSS6.2AI score0.0067EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/16 12:00 a.m.11 views

Google Android Media framework (libhevc) Information Disclosure Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with the Media framework libhevc as a decoding library for multimedia development. libhevc is one of the hevc decoding...

9.1CVSS6.2AI score0.00508EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/16 12:00 a.m.11 views

Unspecified vulnerability in Google Android Media framework (libavc) (CNVD-2018-01100)

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with the Media framework libavc as a framework for multimedia development. is a framework used for multimedia...

7.8CVSS6.6AI score0.00463EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/15 12:00 a.m.10 views

Google Android Qualcomm WLAN elevation of privilege vulnerability (CNVD-2018-01112)

Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Bootloader is a bootloader developed by Qualcomm using the Qualcomm Bootloader is a bootloader developed by...

7.8CVSS7.4AI score0.00151EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/15 12:00 a.m.11 views

Google Android Qualcomm Bootloader Elevation of Privilege Vulnerability (CNVD-2018-01110)

Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Bootloader is a bootloader developed by Qualcomm using the Qualcomm Bootloader is a bootloader developed by...

7.8CVSS7.4AI score0.00137EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/15 12:00 a.m.11 views

Google Android Qualcomm IPA Driver Elevation of Privilege Vulnerability (CNVD-2018-01111)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, of which the Qualcomm IPA driver is a part. Qualcomm IPA driver is one of the IPA drivers developed by Qualcomm. An...

8.8CVSS7.3AI score0.00364EPSS
SaveExploits0References1
Android Security Bulletins
Android Security Bulletins
added 2018/01/02 12:00 a.m.22 views

Pixel / Nexus Security Bulletin—January 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel/Nexus Security Bulletin contains details of security vulnerabilities and functional improvements affecting supported Google Pixel and Nexus devices Google devices. For Google devices, security patch levels of 2018-01-05 or later address all issues in this bulletin and all issues in the...

9.3CVSS8.9AI score0.01805EPSS
SaveExploits0
Android Security Bulletins
Android Security Bulletins
added 2018/01/02 12:00 a.m.90 views

Android Security Bulletin—January 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2018-01-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

10CVSS8.9AI score0.93838EPSS
SaveExploits17
ThreatPost
ThreatPost
added 2017/12/28 2:01 p.m.418 views

Code Used in Zero Day Huawei Router Attack Made Public

Exploit code used in the Mirai malware variant called Satori, which was used to attack hundreds of thousands of Huawei routers over the past several weeks, is now public. Researchers warn the code will quickly become a commodity and be leveraged in DDoS attacks via botnets such as Reaper or...

10CVSS10AI score0.99975EPSS
SaveExploits9References5
seebug.org
seebug.org
added 2017/12/24 12:00 a.m.1498 views

Huawei HG532 Router Remote Code Execution(CVE-2017-17215)

A Zero-Day vulnerability CVE-2017-17215 in the Huawei home router HG532 has been discovered by Check Point Researchers, and hundreds of thousands of attempts to exploit it have already been found in the wild. The delivered payload has been identified as OKIRU/SATORI, an updated variant of Mirai...

0.78278EPSS
SaveExploits3
The Hacker News
The Hacker News
added 2017/12/22 9:43 p.m.49 views

Satori IoT Botnet Exploits Zero-Day to Zombify Huawei Routers

Although the original creators of the infamous IoT malware Mirai have already been arrested and sent to jail, the variants of the notorious botnet are still in the game due to the availability of its source code on the Internet. Hackers have widely used the infamous IoT malware to quietly amass a...

9.2AI score0.78278EPSS
SaveExploits3
ThreatPost
ThreatPost
added 2017/12/22 6:09 p.m.62 views

Huawei Router Vulnerability Used to Spread Mirai Variant

Researchers have identified a vulnerability in a Huawei home router model that is being exploited by an adversary to spread a variant of the Mirai malware called Mirai Okiru, also known as Satori. Researchers at Check Point published a report Thursday, and said the flaw is in Huawei’s router mode...

6.5CVSS9.6AI score0.78278EPSS
SaveExploits3References5
CNVD
CNVD
added 2017/12/19 12:00 a.m.10 views

Sonatype Nexus Repository Manager Weak Password Vulnerability

Sonatype Nexus Repository Manager is a maven repository manager. A security vulnerability exists in the LDAP integration feature in Sonatype Nexus Repository Manager 2.14.5 and earlier versions, which stems from the program's use of hard-coded CMMDwoV values to encrypt passwords. An attacker coul...

10CVSS6.7AI score0.00711EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2017/12/19 12:00 a.m.99 views

Sonatype Nexus Repository Manager 2.x Weak Password Encryption Vulnerability (Dec 2017)

Sonatype Nexus Repository Manager has a weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

10CVSS9.7AI score0.00711EPSS
SaveExploits0References1
Veracode
Veracode
added 2017/12/18 3:43 a.m.15 views

Weak Implementation Of Password Cipher

nexus-ldap-common contains a weak implementation of password cipher. It stores the LDAP bind password using the PBE Key Spec with only 23 iterations and a hard-coded password. This allows the cipher to be easily defeated...

6.8AI score
SaveExploits0
Prion
Prion
added 2017/12/17 5:29 p.m.25 views

Hardcoded credentials

Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature...

10CVSS9.4AI score0.00711EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder