PT-2017-15972

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.34 Oracle VM VirtualBox versions prior to 5.1.16 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...

The vulnerability of the Android operating system, which allows a hacker to gain access to data beyond their authorized levels of permission

The vulnerability of the AOSP Messaging component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to data beyond their authorized levels of permission, using a specially crafted file...

The vulnerability of the Android operating system, which allows a hacker to gain access to data beyond their authorized levels of permission

The vulnerability of the Mediaserver component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to data beyond their authorized levels of permission...

Unauthorized Data Access In Cluster

Apache nifi is vulnerable to unauthorized data accesses. The vulnerability exists in a cluster environment when an anonymous user request is replicated to another node. The replicated node identity will contain the originating node identity instead of the anonymous user's identity...

Google Android Qualcomm Camera Driver Information Disclosure Vulnerability

Android on Nexus 5X, etc. is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. Qualcomm camera driver is a Qualcomm-developed camera driver. Qualcomm camera driver is a camera driver developed by Qualcomm. An information...

Android Qualcomm video driver information disclosure vulnerability (CNVD-2017-02818)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium.Qualcomm Video Driver is a graphics card driver. An information disclosure vulnerability exists in the Qualcomm video driver for Android. An attacker could exploit this vulnerability to...

Google Android MediaTek Driver Information Disclosure Vulnerability (CNVD-2017-03831)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and MediaTek Driver is a MediaTek driver component used in one of MediaTek's devices. An information disclosure vulnerability exists in Google Android MediaTek Driver. An attacker...

Android Qualcomm video driver information disclosure vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium.Qualcomm Video Driver is a graphics card driver. An information disclosure vulnerability exists in the Qualcomm video driver for Android. An attacker could exploit this vulnerability to...

CVE-2017-0461

An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

CVE-2017-0534

An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18...

Information disclosure

An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: N/...

CVE-2017-0459

An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18...

CVE-2017-1150: Improper Privilege Management

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 10.1, 10.5, and 11.1 could allow an authenticated attacker with specialized access to tables that they should not be permitted to view. IBM Reference : 1999515...

JDK: unspecified vulnerability fixed in 6u141, 7u131, and 8u121 (Deployment)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Deployment. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE...

Joomla com_topics component 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comtopics component. An attacker can exploit the vulnerability to access or modify database data...

PT-2017-8303

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager for Web affected versions not specified Description The issue allows web pages to be stored locally, which can then be accessed by another user on the system, potentially leading to unauthorized data access...

CVE-2017-3442

Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2017-3423

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2017-3314

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 12.0.0, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3297

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Framework. Supported versions that are affected are 12.0.2 and 12.0.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...