Design/Logic Flaw

An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider named com.adups.fota.sysoper.provider.InfoProvider in the app with a package name of com.adups.fota.sysoper allows any app on the device to read, write, and delete files as the system user. In the...

CVE-2016-10135

An issue was discovered on LG devices using the MTK chipset with L5.0/5.1, M6.0/6.0.1, and N7.0 software, and RCA Voyager Tablet, BLU Advance 5.0, and BLU R1 HD devices. The MTKLogger app with a package name of com.mediatek.mtklogger has application components that are accessible to any applicati...

Design/Logic Flaw

An issue was discovered on BLU Advance 5.0 and BLU R1 HD devices with Shanghai Adups software. The com.adups.fota.sysoper app is installed as a system app and cannot be disabled by the user. In the com.adups.fota.sysoper app's AndroidManifest.xml file, it sets the android:sharedUserId attribute t...

DEBIAN-CVE-2016-8399

An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and current compiler...

CVE-2016-6774

An information disclosure vulnerability in Package Manager could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as Moderate because it first requires compromising a privileged process. Product:...

CVE-2016-6759

An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not...

UBUNTU-CVE-2016-6773

An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions...

Google Android MediaTek component elevation of privilege vulnerability (CNVD-2017-00538)

Google Android is an operating system developed by Google for smartphones. A security vulnerability in the Google Android MediaTek component allows remote attackers to exploit the vulnerability to elevate privileges through specially crafted applications...

Google Nexus Broadcom Wi-Fi Driver Elevation of Privilege Vulnerability

Google Android is an operating system developed by Google for smartphones. A security vulnerability in the Google Nexus Broadcom Wi-Fi driver allows remote attackers to exploit the vulnerability via a specially crafted application that can elevate privileges...

Google Android Audioserver Information Disclosure Vulnerability (CNVD-2017-00529)

Google Android is an operating system developed by Google for smartphones. Google Android Audioserver has a security vulnerability that allows remote attackers to exploit the vulnerability to gain access to sensitive information through specially crafted applications...

Google Android Audioserver Information Disclosure Vulnerability (CNVD-2017-00530)

Google Android is an operating system developed by Google for smartphones. Google Android Audioserver has a security vulnerability that allows remote attackers to exploit the vulnerability to gain access to sensitive information through specially crafted applications...

Lawmakers Reintroduce Popular Email Privacy Act

A group of bipartisan lawmakers reintroduced the Email Privacy Act, a bill that would require law enforcement to get a warrant before searching email, Facebook messages and files stored on cloud services no matter how old the archives. The Email Privacy Act is an attempt to reform the decade-old...

January 10, 2017—KB3210720 (OS Build 10240.17236)

None None...

MS11-074: Description of the security update for Microsoft Office 2010 Web Apps: September 13, 2011

MS11-074: Description of the security update for Microsoft Office 2010 Web Apps: September 13, 2011 INTRODUCTION Microsoft has released security bulletin MS11-074. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

Description of Windows Small Business Server 2008 Update Rollup 6

Description of Windows Small Business Server 2008 Update Rollup 6 Summary Windows Small Business Server Windows SBS 2008 Update Rollup 6 is now available. This update addresses the following issues that were not previously documented in a Microsoft Knowledge Base KB article. Issue 1 A computer th...

Android Security Bulletin—January 2017Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Alongside the bulletin, we have released a security update to Google devices through an over-the-air OTA update. The Google device firmware images have also been released to the Google Developer...

apps.lib.purdue.edu XSS vulnerability

Open Bug Bounty ID: OBB-202221 Description| Value ---|--- Affected Website:| apps.lib.purdue.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-5547

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network...

Dell SonicWALL Secure Mobile Access SMA 8.1 XSS And WAF CSRF

Summary Keep up with the demands of today’s remote workforce. Enable secure mobile access to critical apps and data without compromising security. Choose from a variety of scalable secure mobile access SMA appliances and intuitive Mobile Connect apps to fit every size business and budget...

FTC Releases Alert on Fake Apps for Mobile Devices

The Federal Trade Commission FTC has released an alert on fraudulent mobile apps designed to exploit consumers. Some fake apps may steal personal information such as credit card numbers. By taking precautions, users can protect themselves and their private data. US-CERT encourages users and...