503 matches found
SQL injection vulnerability in DedeCMS V5.7-SP2 ta***.php page
Weaving dream content management system DedeCms is a PHP open source website management system. A SQL injection vulnerability exists in the DedeCMS V5.7-SP2 ta.php page. An attacker can exploit the vulnerability to obtain sensitive database information...
CVE-2018-11257
Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions SD 210/SD 212/SD 205, SD 845, SD 850...
CVE-2018-11257
Summary: CVE-2018-11257 affects Snapdragon Mobile Trust Authority (TA) permissions, enabling RPMB erase on secure devices in SD 210/212/205 and SD 845/850. The root cause is a permissions/privileges/access control flaw in TA that could allow an attacker with local access to erase RPMB, enabling e...
Design/Logic Flaw
In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes data past the end, or before the beginning, of the intended buffer, which may lead to escalation of Privileges. This issue is rated as high. Android:...
CVE-2017-6293
In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes data past the end, or before the beginning, of the intended buffer, which may lead to escalation of Privileges. This issue is rated as high. Android:...
CVE-2017-6293
CVE-2017-6293 affects NVIDIA SHIELD TV via the Tegra X1 TZ (Widevine TA); a buffer overrun in the TZ/TEE path allows local privilege escalation. The issue is described as a local code execution/elevation of privilege on the Tegra kernel driver. Public details in the connected documents indicate t...
CVE-2017-6293
In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes data past the end, or before the beginning, of the intended buffer, which may lead to escalation of Privileges. This issue is rated as high. Android:...
CVE-2017-6293: Out-of-bounds Write
In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes data past the end, or before the beginning, of the intended buffer, which may lead to escalation of Privileges. This issue is rated as high. Android:...
CVE-2018-6246: Exposure of Sensitive Information to an Unauthorized Actor
In Android before the 2018-05-05 security patch level, NVIDIA Widevine Trustlet contains a vulnerability in Widevine TA where the software reads data past the end, or before the beginning, of the intended buffer, which may lead to Information Disclosure. This issue is rated as moderate. Android:...
PT-2018-17435
Name of the Vulnerable Software and Affected Versions Android versions prior to the 2018-05-05 security patch level Description The issue concerns a buffer overflow in the NVIDIA Widevine Trustlet, specifically in the Widevine TA, where the software reads data past the end or before the beginning...
PT-2018-1373
Name of the Vulnerable Software and Affected Versions Android versions prior to the 2018-05-05 security patch level Description The issue is caused by the software writing data past the end, or before the beginning, of the intended buffer in the NVIDIA Tegra X1 TZ Widevine TA, which may lead to...
Design/Logic Flaw
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, when executing a TA which has been granted privileges to the CPVC MINK class it is possible for the TA to access...
CVE-2016-10452: Improper Input Validation
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, and SD 835, memory protection assertion happens after invoking TA...
PT-2018-1227
Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to insufficient input validation in the Qualcomm Memory Protection component. This can potentially allow a remote attacker to impact the confidentiality...
PT-2018-17280
Name of the Vulnerable Software and Affected Versions: Joomla! JS Jobs component version 1.1.9 Description: The issue exists due to SQL Injection in the JS Jobs component for Joomla!. This occurs via the zipcode parameter in a "newest-jobs" request, or the ta parameter in a "view resume" request...
CVE-2018-5994: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a viewresume request...
CVE-2017-14134
CVE-2017-14134 affects Maplesoft Maple T.A. 2016.0.6 (Customer Hosted). The vulnerability is a Reflected XSS in the forgotten password page, exploitable via the emailAddress parameter to passwordreset/PasswordReset.do. CVSS details indicate low to moderate impact (Confidentiality/Integrity potent...
TA News-App - External URLs, Suspicious files, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application TA News-App published at the 'play' market has multiple vulnerabilities...
ta-odessa.com Open Redirect vulnerability
Vulnerable URL: http://www.ta-odessa.com/go.php?link=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1756369 Google Pagerank| 3 VIP website...
IC3 Issues Alert on CryptoWall Ransomware
The Internet Crime Complaint Center IC3 has issued an alert warning that U.S. individuals and businesses are still at risk of CryptoWall ransomware fraud. Scam operators use ransomware—a type of malicious software—to infect a device and restrict access until a ransom fee is paid. Individuals an...