CVE-2017-6650

A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An...

CVE-2017-6649

CVE-2017-6649 concerns Cisco NX-OS System Software CLI on Cisco Nexus Series Switches. The vulnerability arises from insufficient input validation of command arguments in the CLI, allowing an authenticated, local attacker to inject crafted arguments and read or write arbitrary files outside the i...

Cisco Nexus 5000 Series Switches CLI Command Injection Vulnerability (cisco-sa-20170517-nss)

A vulnerability in the CLI of Cisco NX-OS System Software running on Cisco Nexus 5000 Series Switches could allow an authenticated, local attacker to perform a command injection attack. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, a...

Cisco Nexus 5000 Series Switches Telnet CLI Command Injection Vulnerability (cisco-sa-20170517-nss1)

A vulnerability in the Telnet CLI command of Cisco NX-OS System Software running on Cisco Nexus 5000 Series Switches could allow an authenticated, local attacker to perform a command injection attack. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a...

Cisco Nexus Series Switches CLI Command Injection Vulnerability

A vulnerability in the CLI of Cisco NX-OS System Software running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this...

Cisco Nexus Series Switches Telnet CLI Command Injection Vulnerability

A vulnerability in the Telnet CLI command of Cisco NX-OS System Software running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could...

CVE-2017-0630

An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

Google Nexus 9 Cypress SAR Firmware Injection via I2C(CVE-2017-0563)

Product Google Nexus 9 Vulnerable Version Nexus 9 Android Builds before N4F27B - May 2017, i.e. before bootloader 3.50.0.0143. Mitigation Install N4F27B or later bootloader version 3.50.0.0143. Technical Details The Nexus 9 device contains a sensor SoC manufactured by Cypress. The sensor is manag...

Google Nexus 9 SensorHub Firmware Downgrade Vulnerability(CVE-2017-0582)

Product Google Nexus 9 Vulnerable Version Nexus 9 Android Builds before N4F27B - May 2017, i.e. before bootloader 3.50.0.0143. Mitigation Install N4F27B or later bootloader version 3.50.0.0143. Technical Details The Nexus 9 device contains a SoC manufactured by Cywee which implements a “Sensor...

Google Nexus Synaptics Touchscreen Firmware Injection(CVE-2017-0433)

Products Nexus 6P Nexus 9 Android One Pixel Pixel XL Vulnerable Versions Verified on Nexus 9 6.0.1/MOB30W Verified on Nexus 9 7.0/NRD90M Technical Details Due to lenient SELinux and DAC policy, vulnerable Synaptics DSX touchscreen driver sysfs file entires are exposed to an attacker that executes...

Google Android Qualcomm crypto engine driver information disclosure vulnerability

Androidon Nexus5X etc. is a set of open source operating system running on Nexus5X etc. smart devices and based on Linux, which is jointly developed by Google and the Open Handheld Alliance OHA.Qualcomm crypto engine driver is one of the... Qualcomm crypto engine driver. An information disclosure...

Google Android Kernel Trace Subsystem Information Disclosure Vulnerability

Android on Nexus 5X is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X and other smart devices. kernel trace subsystem is a component of the kernel trace system that is used in it. An information disclosure vulnerability exists in...

Google Nexus 9 SensorHub Firmware Downgrade Vulnerability

Exploit for Android platform in category remote exploits Title: ==== Google Nexus 9 SensorHub Firmware Downgrade Vulnerability Identifier: ======== CVE-2017-0582 Product: ======= Google Nexus 9 Vulnerable Version: ================ Nexus 9 Android Builds before N4F27B - May 2017, i.e. before...

Google Nexus 9 Cypress SAR Firmware Injection via I2C Vulnerability

Exploit for Android platform in category remote exploits Title: ==== Google Nexus 9 Cypress SAR Firmware Injection via I2C Identifier: ======== CVE-2017-0563 Product: ======= Google Nexus 9 Vulnerable Version: ================ Nexus 9 Android Builds before N4F27B - May 2017, i.e. before bootloade...

Multiple Google Devices Qualcomm Camera Driver Information Disclosure Vulnerabilities

Android on Nexus 5X is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. Qualcomm Sound Driver is a Qualcomm-developed sound driver used in the Nexus 5X. Qualcomm Sound Driver is a sound driver developed by Qualcomm. An...

Android Qualcomm camera driver information disclosure vulnerability

Android on Nexus 5X, etc. is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. Qualcomm camera driver is a Qualcomm-developed camera driver. Qualcomm camera driver is a camera driver developed by Qualcomm. An information...

Android Qualcomm sound driver elevation of privilege vulnerability (CNVD-2017-06115)

Android on Nexus 5X is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. Qualcomm sound driver is a Qualcomm sound driver used in the Nexus 5X. Qualcomm sound driver is a sound driver developed by Qualcomm. The Qualcomm sound...

Android Qualcomm sound driver elevation of privilege vulnerability

Android on Nexus 5X is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. Qualcomm Sound Driver is a sound driver developed by Qualcomm that is used on the Nexus 5X. Qualcomm sound driver is a sound driver developed by Qualcom...

Google Android Qualcomm Secure Execution Environment Communicator Driver Elevation of Privilege Vulnerability

Android on Nexus 5X, etc. is an open source Linux-based operating system for Nexus 5X and other smart devices developed by Google and the Open Handheld Alliance OHA.The Qualcomm Secure Execution Environment QSE is an interface used to provide communication between the user space and the Qualcomm...

Google Patches 6 Critical Android Mediaserver Bugs in May Security Update

In Brief Google has released its monthly security patches for Android this week, addressing 17 critical vulnerabilities, 6 of which affect Android Mediaserver component that could be used to execute malicious code remotely. Besides patches for Mediaserver, Google also fixed 4 critical...