CVE-2018-9369

CVE-2018-9369 describes a local elevation-of-privilege in the bootloader where a fastboot command allows a user to pass kernel command line arguments. The root cause is the bootloader’s handling of user-supplied kernel parameters, enabling a local attacker to gain higher privileges without additi...

CVE-2018-9368

Concretely affects MediaTek mtksocoaudio (debugfs) in the Android stack. The vulnerability is caused by a missing bounds check combined with weakened SELinux policies in the mtksocoaudio debugfs, enabling an arbitrary kernel memory write. Impact: local privilege escalation to a system/privileged ...

CVE-2018-9367

CVE-2018-9367 describes a potential out-of-bounds write in the MediaTek Cameratool CCAP component (function FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS within Meta_CCAP_Para.cpp). The underlying issue is improper input validation, which could enable local escalation of privilege with no additional exe...

CVE-2018-9366

CVE-2018-9366 affects Google/Android devices with the MediaTek IMSA component. In IMSA_Recv_Thread and VT_IMCB_Thread (IMSAClient.cpp and VideoTelephony.c), an out-of-bounds write due to an integer overflow is described, leading to local escalation of privilege with no user interaction required. ...

CVE-2018-9348

CVE-2018-9348 : The Red Hat/NVD entries describe an integer overflow in SMF_ParseMetaEvent within eas_smf.c that can cause remote Denial of Service via resource exhaustion. Exploitation requires user interaction, and the public details emphasize DoS impact with no explicit remote code execution. ...

CVE-2018-9346

CVE-2018-9346 affects the Android AudioPolicyService component: In BnAudioPolicyService::onTransact there is information disclosure due to uninitialized data, enabling local information disclosure without additional privileges. Exploitation context: local access, no user interaction required. Aff...

CVE-2018-9338

CVE-2018-9338 is an Android Framework vulnerability described in multiple sources as an out-of-bounds write in ResStringPool::setTo (ResourceTypes.cpp) caused by a missing bounds check. The issue can lead to local escalation of privilege with no user interaction required. Affected component is wi...

CVE-2023-21270

CVE-2023-21270 affects Android’s PermissionManagerServiceImpl.java, specifically in restorePermissionState, where a flaw can allow an app to retain permissions that should be revoked due to incorrect permission flag clearance during an update. This can lead to local elevation of privilege with Us...

Segmenting Hybrid Clouds: What to Look for in a Solution

Learn how to select a microsegmentation solution to fortify your organization’s cloud security strategies and protect your assets across multiple public clouds...

CVE-2020-26066

Cisco SD-WAN vManage Software Web UI contains an XML External Entity (XXE) processing vulnerability in certain XML files parsed by the application. An authenticated remote attacker could exploit this flaw to gain read and write access to information stored on the system. Affected component is the...

CVE-2020-26063

CVE-2020-26063 — Cisco Integrated Management Controller (IMC) API endpoints have improper authorization checks, enabling an authenticated remote attacker to bypass authorization and actions on the vulnerable system. Exploitation involves sending crafted API requests that could download files or m...

CVE-2020-26071

CVE-2020-26071 affects Cisco SD-WAN Software CLI. The issue is caused by insufficient input validation for specific commands, allowing an authenticated, local attacker to create or overwrite arbitrary files on an affected device, potentially leading to a DoS. Cisco has released software updates a...

CVE-2020-3420

CVE-2020-3420 affects Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (Unified CM SME). The issue is a cross-site scripting (XSS) vulnerability caused by insufficient validation of user-supplied input in the web-based management interface. An authentica...

CVE-2020-3431

Cisco Small Business RV042 and RV042G Dual WAN Router series are affected by an unauthenticated XSS vulnerability in the web-based management interface due to insufficient input validation. An attacker can lure a user to click a crafted link, potentially executing arbitrary script code in the use...

CVE-2020-26073

Cisco SD-WAN vManage Software is affected by a directory traversal/local file inclusion issue in the application data endpoints (APIs). It enables an unauthenticated attacker to read sensitive files and tokens via crafted API requests. The core issue is improper validation of directory traversal ...

CVE-2020-26074

CVE-2020-26074 affects Cisco SD-WAN vManage, where the vulnerability lies in the System File Transfer feature due to improper validation of path input. An authenticated, local attacker could exploit specially crafted path variables to overwrite arbitrary files, potentially gaining escalated privi...

CVE-2020-3525

The CVE-2020-3525 issue affects Cisco Identity Services Engine (ISE) Admin portal. It stems from incorrect inclusion of saved passwords when loading configuration pages, allowing an authenticated, remote attacker with read/write Admin portal access to browse pages containing sensitive data and re...

CVE-2020-3532

CVE-2020-3532 affects Cisco Unified Communications Manager and related components (CUCM, CUCM Session Management Edition, IM&P, Unity Connection). The web-based management interface fails to properly validate input, enabling unauthenticated, remote attackers to persuade users to click crafted lin...

CVE-2020-3538

Cisco DCNM (Data Center Network Manager) contains a path traversal vulnerability in a REST API endpoint that allows an authenticated, remote attacker to overwrite or list arbitrary files on affected devices. The issue stems from insufficient path restrictions, exploitable by sending crafted HTTP ...

CVE-2020-3539

CVE-2020-3539 concerns Cisco Data Center Network Manager (DCNM). The issue arises in the web-based management interface where a failure to restrict resources intended for Administrator users allows an authenticated, remote attacker to list, view, create, edit, and delete templates, effectively by...