PT-2017-1438

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4 through 7.1.1 Description An elevation of privilege issue in the NFC component could allow a proximate attacker to execute arbitrary code within the context of a privileged process. This issue is rated as High because it...

PT-2017-1401

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description An elevation of privilege issue in the Synaptics touchscreen driver could allow a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated...

PT-2017-1408

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the MediaTek hardware sensor driver. This could allow a local malicious application to execute arbitrary code within the...

PT-2017-1381

Name of the Vulnerable Software and Affected Versions Android versions prior to Kernel-3.18 Description The issue is related to an elevation of privilege vulnerability in the NVIDIA GPU driver, which could allow a local malicious application to execute arbitrary code within the context of the...

PT-2017-1400

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description The issue is related to an elevation of privilege vulnerability in the Qualcomm IPA driver, which could allow a local malicious application to execute arbitrary code within the context of t...

Multiple F5 BIG-IP Products Privilege Enhancement Vulnerability

F5 BIG-IP Analytics and others are products of F5 Corporation in the U.S. F5 BIG-IP Analytics is a suite of Web application performance analytics software. the APM is a suite of solutions that provide secure and unified access to business-critical applications and networks. and the LTM is a local...

CVE-2017-0508

An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing th...

Apple Mac OS X Multiple Vulnerabilities-03 (Feb 2017)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Netgear DGN2200v1/v2/v3/v4 - 'dnslookup.cgi' Remote Command Execution

!/usr/bin/python Provides access to default user account, privileges can be easily elevated by using either: - a kernel exploit ex. memodipper was tested and it worked - by executing /bin/bd suid backdoor present on SOME but not all versions - by manipulating the httpd config files to trick the...

Security Advisory - Privilege Elevation Vulnerability Caused by Arbitrary File Upload in Huawei Themes

The Huawei Themes APP in some Huawei products has a privilege elevation vulnerability due to the lack of theme pack check. An attacker could exploit this vulnerability to upload theme packs containing malicious files and trick users into installing the theme packets, resulting in the execution of...

Palo Alto PAN-OS Kernel Vulnerability

A vulnerability exists in the kernel of PAN-OS that may result in an elevation of privilege. This issue is publicly known as Dirty COW. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

PT-2017-1290

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.2 macOS versions prior to 10.12.2 watchOS versions prior to 3.1.3 Description The issue involves the Kernel component and allows local users to gain privileges or cause a denial of service memory corruption via...

PT-2017-1308

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12 Description The issue is related to a sandbox escape in the libxpc component, specifically with the launchctl process, due to insufficient access control. This could allow a local attacker to elevate their...

Pivotal Cloud Foundry Elastic Runtime Elevation of Privilege Vulnerability

Pivotal Cloud Foundry PCF is a set of open source Platform-as-a-Service PaaS cloud computing platforms from U.S.-based Pivotal Software, which provides container scheduling, continuous delivery, and automated service deployment. An elevation of privilege vulnerability exists in Pivotal Cloud...

NVIDIA GPU and GeForce Experience Elevation of Privilege Vulnerability

The NVIDIA GPU and GeForce Experience installer is a set of installation tools from NVIDIA that are used to automatically update the graphics card drivers in the GPU graphics processor. A security vulnerability exists in NVIDIA GPU and GeForce Experience installer, which arises from the program...

CVE-2016-9345

An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within the DeltaV control system...

PT-2017-10075

Name of the Vulnerable Software and Affected Versions Emerson DeltaV versions 12.3 through 12.3.1 Emerson DeltaV version 13.3 Description An issue was discovered that may allow a local attacker to elevate privileges within the DeltaV control system. Recommendations For Emerson DeltaV versions 12....

Google Android Audioserver elevation of privilege vulnerability (CNVD-2017-01455)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in Google Android Audioserver. An attacker can exploit this vulnerability to execute arbitrary code with elevated privileges...

HP Helion Eucalyptus Remote Privilege Elevation Vulnerability

HP Helion Eucalyptus is an open source for building Amazon Web Services AWS compatible private cloud solutions from Hewlett-Packard HP. A remote elevation of privilege vulnerability exists in HP Helion Eucalyptus. A remote attacker could exploit the vulnerability to gain elevated privileges...

Google Android Qualcomm sound driver privilege elevation vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability in the Qualcomm sound driver in Android on multiple Google devices allows remote attackers to exploit the vulnerability to elevate privileges through special...