Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2017-36516)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in Qualcomm Audio in Android on Google Pixel and Nexus devices. An attacker exploited the vulnerability to elevate privileg...

Google Android Kernel V4L2 video driver elevation of privilege vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handheld Alliance OHA.Kernel V4L2 video driver Kernel V4L2 video driver is one of the video drivers used in it. A boost vulnerability...

Google Android Kernel Sound timer elevation of privilege vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Kernel Sound timer is one of the kernel sound timer components used in the Kernel Sound timer is a kernel sound timer...

Cisco NX-OS System Software Command Injection Vulnerability in Multiple Cisco Products (CNVD-2017-36153)

Cisco Multilayer Director Switches are products of Cisco Corporation.Cisco Multilayer Director Switches are switches.Nexus 2000 Series Fabric Extenders are Nexus 2000 Series Array Extenders.NX-OS System Software is a set of operating systems used in them.CLI is a command line program used in...

Multiple Cisco Products Cisco NX-OS System Software Arbitrary File Read Vulnerability

Cisco Multilayer Director Switches are products of Cisco Corporation.Cisco Multilayer Director Switches are switches.Nexus 2000 Series Fabric Extenders are Nexus 2000 Series Array Extenders.NX-OS System Software is a set of operating systems used in them.CLI is a command line program used in...

Multiple Cisco Products Cisco NX-OS System Software Security Bypass Vulnerabilities

Cisco Multilayer Director Switches are products of Cisco Corporation.Cisco Multilayer Director Switches is a switch product.Unified Computing System Manager is a set of embedded device management software.Cisco NX-OS System Software is a set of software that runs in the switch. Cisco NX-OS System...

Android Security Bulletin—December 2017Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2017-12-05 or later address all of these issues. To learn how to check a device's security patch level, see Check & update your Android version. Android partners are...

Pixel / Nexus Security Bulletin—December 2017Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel/Nexus Security Bulletin contains details of security vulnerabilities and functional improvements affecting supported Google Pixel and Nexus devices Google devices. For Google devices, security patch levels of 2017-12-05 or later address all issues in this bulletin. To learn how to check...

Code Execution Vulnerability in Multiple Cisco Products

Cisco Nexus 2000 Series Fabric Extenders and so on are the products of the American Cisco Cisco company.Cisco Nexus 2000 Series Fabric Extenders is a Nexus 2000 series array extender.Nexus 5000 Series Nexus 5000 Series Switches is a 5000 series switch. A code execution vulnerability exists in the...

Cisco NX-OS System Software Command Injection Vulnerability in Multiple Cisco Products (CNVD-2017-36139)

Cisco Multilayer Director Switches are products of Cisco Corporation.Cisco Multilayer Director Switches are switches.Nexus 2000 Series Fabric Extenders are Nexus 2000 Series Array Extenders.NX-OS System Software is a set of operating systems used in them.CLI is a command line program used in...

Cisco NX-OS System Software Command Injection Vulnerability in Multiple Cisco Products (CNVD-2017-36141)

Cisco Nexus 5000 Series Switches are the Cisco Nexus series of data center-class switches from Cisco, Inc.Cisco NX-OS System Software is the data center operating system that runs on them. A command injection vulnerability exists in the CLI of Cisco NX-OS System Software in multiple Cisco product...

Multiple Cisco Products Cisco NX-OS System Software Unauthorized Access Vulnerability

Cisco MDS Multilayer Director Switches, Cisco Nexus 7000 Series Switches, and Cisco Nexus 7700 Series Switches are all Cisco switches.NX-OS System The NX-OS System Software is the operating system used in these switches. An unauthorized access vulnerability exists in Cisco NX-OS System Software...

Unauthorized Access Vulnerability in NX-OS System Software for Multiple Cisco Products

Cisco Nexus 3000 Series Switches and others are products of Cisco Corporation.Cisco Nexus 3000 Series Switches is a 3000 series switch.Nexus 9500 R-Series Line Cards is a 9500R series line card. NX-OS System Software is an operating system that runs on it. An unauthorized access vulnerability...

Multiple Cisco Products Cisco NX-OS System Software Arbitrary File Write Vulnerability

Cisco Multilayer Director Switches are products of Cisco Corporation.Cisco Multilayer Director Switches is a switch product.Unified Computing System Manager is a set of embedded device management software.Cisco NX-OS System Software is a set of software that runs in the switch. Cisco NX-OS System...

The vulnerability of the Python script execution subsystem of the NX-OS network operating system allows a attacker to execute arbitrary commands on the underlying operating system.

The vulnerability of the Python script execution subsystem in the NX-OS network operating system is related to insufficient cleaning of user parameters used by certain Python functions in an isolated scripting environment. Exploiting this vulnerability allows a malicious actor to exit the isolate...

Design/Logic Flaw

A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software patch. The vulnerability is due to insufficient NX-OS signature verification for software patches. An authenticated, local attacker could exploit th...

Input validation

A vulnerability in the TCL scripting subsystem of Cisco NX-OS System Software could allow an authenticated, local attacker to escape the interactive TCL shell and gain unauthorized access to the underlying operating system of the device. The vulnerability exists due to insufficient input validati...

Command injection

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command...

CVE-2017-12340

A vulnerability in Cisco NX-OS System Software running on Cisco MDS Multilayer Director Switches, Cisco Nexus 7000 Series Switches, and Cisco Nexus 7700 Series Switches could allow an authenticated, local attacker to access the Bash shell of an affected device's operating system, even if the Bash...

Design/Logic Flaw

A vulnerability in the Open Agent Container OAC feature of Cisco Nexus Series Switches could allow an unauthenticated, local attacker to read and send packets outside the scope of the OAC. The vulnerability is due to insufficient internal security measures in the OAC feature. An attacker could...