CVE-2016-10492

CVE-2016-10492 affects Android devices running on Qualcomm Snapdragon/mobile platforms. The issue arises from improper ciphersuite validation, allowing SecSSL to accept an unadvertised ciphersuite. Reported impact includes high confidentiality and integrity concerns (per CVSSv3: Critical, 9.1; CV...

PT-2018-4690

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 Description The issue is related to improper ciphersuite validation, which leads to SecSSL accepting an unadvertised ciphersuite. This affects Android on various Qualcomm Snapdragon Mobile and Snapdragon We...

CVE-2016-10492: Improper Input Validation

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD...

File Upload Vulnerability in NetSense SecSSL VPN

Netnifty SecSSL VPN provides 2-in-1 VPN service and network firewall service based on SSL protocol + IPsec protocol, which provides security for data interaction. A file upload vulnerability exists in NetShen SecSSL VPN. An attacker can utilize the vulnerability to upload malicious script files o...