Denial Of Service (DoS)

kernel is vulnerable to denial of service. Access to the video output control state is not properly restricted, allowing local users to cause a system hang via a read/write operation...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The ext2 and ext3 filesystem code failed to properly handle corrupted data structures, leading to a possible local denial of service issue when read or write operations were performed...

Samsung Mobile Device Kernel Driver Code Execution Vulnerability

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A code execution vulnerability exists in the Samsung mobile device kernel driver that can be exploited by an attacker to allow out-of-bounds read/write operations a...

CVE-2018-21072

An issue was discovered on Samsung mobile devices with M6.0, N7.x, and O8.0 Exynos chipsets software. A kernel driver allows out-of-bounds Read/Write operations and possibly arbitrary code execution. The Samsung ID is SVE-2018-11358 May 2018...

Samsung Mobile Device Input Validation Error Vulnerability (CNVD-2020-32822)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have an input validation error vulnerability that can be exploited by an attacker to read/write files in a locked state with the help of a...

PT-2020-8716

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with M6.0 through O8.0 Description An issue was discovered that allows out-of-bounds Read/Write operations and possibly arbitrary code execution due to a kernel driver. Recommendations For Samsung mobile devices with M6....

CVE-2017-18648

An issue was discovered on Samsung mobile devices with KK4.4.x, L5.x, M6.x, and N7.x software. Arbitrary file read/write operations can occur in the locked state via a crafted MTP command. The Samsung ID is SVE-2017-10086 November 2017...

PT-2020-8197

Name of the Vulnerable Software and Affected Versions: Samsung mobile devices versions 4.4.x through 7.x Description: An issue allows arbitrary file read/write operations in the locked state via a crafted MTP command. Recommendations: For versions 4.4.x through 7.x, at the moment, there is no...

CVE-2017-18648: Improper Input Validation

An issue was discovered on Samsung mobile devices with KK4.4.x, L5.x, M6.x, and N7.x software. Arbitrary file read/write operations can occur in the locked state via a crafted MTP command. The Samsung ID is SVE-2017-10086 November 2017...

Totemo totemomail read/write access vulnerability

Totemo totemomail is an email encryption solution from the Swiss company Totemo. A security vulnerability exists in Totemo totemomail version 7.0.0. The vulnerability can be exploited by a remote attacker via enumeration to read and modify mail folders...

CVE-2020-5555

Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write data of the files placed in the same directory where it is placed via unspecified vector due to the improper input validation issue...

Vulnerability of the rwsem_down_write_slowpath function (kernel/locking/rwsem.c) in the Linux operating system’s kernel, which allows an attacker to disclose protected information or cause service failure

The vulnerability of the rwsemdownwriteslowpath function in the Linux kernel’s locking/rwsem.c file relates to operations that occur outside of the buffer memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...

Safari in Operator Side Effect Exploit

This module exploits an incorrect side-effect modeling of the 'in' operator. The DFG compiler assumes that the 'in' operator is side-effect free, however the element with the PDF plugin provides a callback that can trigger side-effects leading to type confusion CVE-2020-9850. The type confusion c...

CVE-2020-10565

grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command read or write by a guest through a grub2.cfg file. This allows an untrusted guest to perform arbitrary read or write operations in the context of the grub-bhy...

The vulnerability of the High Availability service of the Cisco Smart Software Manager On-Prem administration tool allows a hacker to gain access to read and write system files.

The vulnerability of the Cisco Smart Software Manager On-Premise administration software’s high availability feature is related to the presence of a statistical password for the standard account. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read and...

Hangzhou Kodo Cloud Network Co. Kodo Cloud V4.40 suffers from weak password vulnerability

KodExplorer, Kodo Cloud, is a private cloud online document management solution based on Web technology. Hangzhou Kodo Cloud Network Co., Ltd. Kodo Cloud V4.40 exists a weak password vulnerability, which can be exploited by an attacker to cause arbitrary directory browsing, arbitrary read and wri...

uftpd Path Traversal Vulnerability

uftpd is a Linux-based FTP/TFTP file transfer server. A path traversal vulnerability exists in uftpd versions prior to 2.11. An attacker can exploit this vulnerability to read or write to any location on the file system with the help of several different FTP commands...

CVE-2020-8010: Undefined Security Weakness

CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...

CVE-2019-19194

The Bluetooth Low Energy Secure Manager Protocol SMP implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices installs a zero long term key LTK if an out-of-order link-layer encryption request...

PT-2020-10083

Name of the Vulnerable Software and Affected Versions Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0 Telink Semiconductor BLE SDK versions before November 2019 for TLSR823x through 1.3.0 Telink Semiconductor BLE SDK versions before November 2019 for TLSR826x...