Google Android Information Disclosure Vulnerability (CNVD-2019-36410)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Google Android 10 suffers from an information disclosure vulnerability. The vulnerability stems from an out-of-bounds read problem in libxaac in Android caused by a...

Google Android Remote Code Execution Vulnerability (CNVD-2019-35251)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in Google Android 10. The vulnerability stems from an out-of-bounds write problem in libxaac in Android caused by a lac...

Google Android Information Disclosure Vulnerability (CNVD-2019-36411)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in libxaac in Google Android 10. The vulnerability stems from the presence of uninitialized data. An attacker could...

Google Android Information Disclosure Vulnerability (CNVD-2019-36431)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Google Android 10 suffers from an information disclosure vulnerability. The vulnerability stems from an out-of-bounds read problem in libxaac in Android caused by a...

Google Android Information Disclosure Vulnerability (CNVD-2019-36424)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Google Android 10 suffers from an information disclosure vulnerability. The vulnerability stems from an out-of-bounds read problem in libxaac in Android caused by a...

McAfee Endpoint Security Code Injection Vulnerability

McAfee Endpoint Security ENS is the United States McAfee McAfee company's set of framework for providing intelligent collaboration and advanced threat defense. The framework supports the entire threat defense lifecycle of real-time communications control and actionable threat forensics and so on....

IBM Security Guardium Authorization Issues Vulnerability

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An authorization issue vulnerability exists in IBM Security Guardium...

Google Android elevation of privilege vulnerability (CNVD-2019-34405)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Google Android 10 suffers from an elevation of privilege vulnerability that can be exploited by a local attacker to achieve elevation of privilege...

Google Android Information Disclosure Vulnerability (CNVD-2019-34400)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Google Android 10 suffers from an information disclosure vulnerability that can be exploited by remote attackers to obtain information...

Google Android Information Disclosure Vulnerability (CNVD-2019-34399)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Google Android 10 has an information leakage vulnerability, the vulnerability stems from the existence of libxaac in Android lack of boundary checking caused by the...

CVE-2019-0370

Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1, enables an attacker to use crafted input to interfere with the structure of the surrounding query leading to XPath Injection...

Windows op***.cnf file has an elevation of privilege vulnerability

Windows 10 is an operating system developed by Microsoft Corporation in the United States for use in computers and tablets. An elevation of privilege vulnerability exists in the Windows op.cnf file, which can be exploited by an attacker to achieve elevation of privilege...

October 8, 2019-KB4524099 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10 Version 1809 and Windows Server 2019

None None...

October 8, 2019-KB4524097 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1709

None None...

October 8, 2019-KB4524098 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1803

None None...

CVE-2019-4422

IBM Security Guardium 9.0, 9.5, and 10.6 are vulnerable to a privilege escalation which could allow an authenticated user to change the accessmgr password. IBM X-Force ID: 162768...

Google Android Denial of Service Vulnerability (CNVD-2019-34131)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A denial of service vulnerability exists in Google Android 10. The vulnerability stems from the presence of incorrect input validation in libstagefright in Android...

FasterXML jackson-databind input validation error vulnerability (CNVD-2019-37149)

FasterXML Jackson is a U.S. FasterXML company for Java data processing tools . jackson-databind is one of the components with data binding capabilities . An input validation error vulnerability exists in FasterXML jackson-databind versions prior to 2.9.10. The vulnerability stems from a network...

More SIM Cards Vulnerable to Simjacker Attack Than Previously Disclosed

In case you missed it. SimJacker vulnerability is concerning because it can be executed: ➡️ against mass audience, ➡️ against devices manufactured by any vendor, ➡️ with just a $10 GSM modem, ➡️ and there's nothing much affected users can do. Details — https://t.co/BPApXsNghe...

CVE-2019-9435

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80146682...