PT-2017-2862

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 Description The issue is related to insufficient access control in the libminikin library of the Android operating system. It allows a remote attacker to elevate their privilege...

CVE-2017-0664

A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36491278...

CVE-2017-0665

A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36991414...

CVE-2017-0665

A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36991414...

CVE-2017-0705

A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-34973477. References: B-RB119898...

CVE-2017-0667

A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37478824...

CVE-2017-0667

CVE-2017-0667 is an Android framework elevation of privilege vulnerability affecting Android 5.0.2, 5.1.1, 6.0/6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID A-37478824). The issue is categorized as Framework EoP; details in connected sources confirm affected component and version range but do not prov...

CVE-2017-0664

A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36491278...

CVE-2017-0704

A elevation of privilege vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-33059280...

Cross site scripting

A vulnerability in certain commands of Cisco Elastic Services Controller could allow an authenticated, remote attacker to elevate privileges to root and run dangerous commands on the server. The vulnerability occurs because a "tomcat" user on the system can run certain shell commands, allowing th...

CVE-2017-6712

A vulnerability in certain commands of Cisco Elastic Services Controller could allow an authenticated, remote attacker to elevate privileges to root and run dangerous commands on the server. The vulnerability occurs because a "tomcat" user on the system can run certain shell commands, allowing th...

PT-2017-10611

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an elevation of privilege vulnerability in the HTC led driver, affecting the Android kernel. Recommendations For Android kernel, apply the fix referenced by Android ID: A-36088467 to resolve t...

CVE-2017-6712: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in certain commands of Cisco Elastic Services Controller could allow an authenticated, remote attacker to elevate privileges to root and run dangerous commands on the server. The vulnerability occurs because a "tomcat" user on the system can run certain shell commands, allowing th...

PT-2017-17266

Name of the Vulnerable Software and Affected Versions Cisco Elastic Services Controller versions prior to 2.3.1.434 and 2.3.2 Description A vulnerability in certain commands of Cisco Elastic Services Controller could allow an authenticated, remote attacker to elevate privileges to root and run...

Code injection

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges to the root level. More Information: CSCvb99384. Known Affected Releases: 6.2.1.BASE. Known Fixed Releases: 6.2.11.3i.ROUT 6.2.1.29i.ROUT 6.2.1.26i.ROUT...

CVE-2017-6718

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges to the root level. More Information: CSCvb99384. Known Affected Releases: 6.2.1.BASE. Known Fixed Releases: 6.2.11.3i.ROUT 6.2.1.29i.ROUT 6.2.1.26i.ROUT...

SUSE SLES11 Security Update : xen (SUSE-SU-2017:1715-1)

This update for xen fixes the following security issues : - blkif responses leaked backend stack data, which allowed unprivileged guest to obtain sensitive information from the host or other guests XSA-216, bsc1042863 - Page transfer might have allowed PV guest to elevate privilege XSA-217,...

Improper access control

On Lenovo VIBE mobile phones, improper access controls on the nacserver component can be abused in conjunction with CVE-2017-3749 and CVE-2017-3750 to elevate privileges to the root user commonly known as 'rooting' or "jail breaking" a device...

Linux Kernel Elevation of Privilege Vulnerability (CNVD-2017-15843)

Linux Kernel is an open source operating system. Linux Kernel suffers from a security bypass vulnerability that allows local attackers to exploit the vulnerability to submit special requests and elevate privileges...

Sophos XG Firewall < 16.05.5 MR5 Multiple Vulnerabilities

Sophos XG Firewall is prone multiple vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...