1223 matches found
Privilege escalation
A flaw was found in pritunl-client before version 1.0.1116.6. Arbitrary write to user specified path may lead to privilege escalation...
CVE-2016-7063
A flaw was found in pritunl-client before version 1.0.1116.6. Arbitrary write to user specified path may lead to privilege escalation...
CVE-2016-7063
A flaw was found in pritunl-client before version 1.0.1116.6. Arbitrary write to user specified path may lead to privilege escalation...
CVE-2016-7063: Improper Limitation of a Pathname to a Restricted Directory
A flaw was found in pritunl-client before version 1.0.1116.6. Arbitrary write to user specified path may lead to privilege escalation...
PT-2020-8052
Name of the Vulnerable Software and Affected Versions: pritunl-client versions prior to 1.0.1116.6 Description: A flaw was found in the software that may allow arbitrary write to a user-specified path, potentially leading to privilege escalation. Recommendations: For versions prior to 1.0.1116.6,...
npm: Symlink reference outside of node_modules folder through the bin field upon installation
Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It is possible for packages to create symlinks to files outside of thenodemodules folder through the bin field upon installation. A properly constructed entry in the package.json bin field would allow a package...
FarSite Communications FarLinX X25 Gateway Arbitrary Write Vulnerability
FarSite Communications FarLinX X25 Gateway is a gateway product from FarSite Communications, UK. It features a browser interface, online statistics set, connection logging, active session display and status change alerts. FarSite Communications FarLinX X25 Gateway An arbitrary write vulnerability...
CVE-2017-18648
An issue was discovered on Samsung mobile devices with KK4.4.x, L5.x, M6.x, and N7.x software. Arbitrary file read/write operations can occur in the locked state via a crafted MTP command. The Samsung ID is SVE-2017-10086 November 2017...
CVE-2017-18657
An issue was discovered on Samsung mobile devices with M6.0 and N7.x software. There is an arbitrary write in a trustlet. The Samsung ID is SVE-2017-8893 August 2017...
CVE-2017-18657
An issue was discovered on Samsung mobile devices with M6.0 and N7.x software. There is an arbitrary write in a trustlet. The Samsung ID is SVE-2017-8893 August 2017...
Code injection
An issue was discovered on Samsung mobile devices with M6.0 and N7.x software. There is an arbitrary write in a trustlet. The Samsung ID is SVE-2017-8893 August 2017...
CVE-2017-18657
CVE-2017-18657 concerns Samsung mobile devices running M(6.0)/N(7.x) software. The issue is an arbitrary write in a trustlet (Samsung ID SVE-2017-8893). Connected documents (Red Hat, NVD/NVD mirror, CVE lists) corroborate the same root cause description, with no publicly detailed exploit or affec...
CVE-2017-18657
An issue was discovered on Samsung mobile devices with M6.0 and N7.x software. There is an arbitrary write in a trustlet. The Samsung ID is SVE-2017-8893 August 2017...
PT-2020-8206
Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with M6.0 and N7.x software Description: An issue was discovered that allows for an arbitrary write in a trustlet. Recommendations: For Samsung mobile devices with M6.0 software, update to a version that fixes the issue...
CVE-2017-18657: Improper Check for Unusual or Exceptional Conditions
An issue was discovered on Samsung mobile devices with M6.0 and N7.x software. There is an arbitrary write in a trustlet. The Samsung ID is SVE-2017-8893 August 2017...
Samsung Mobile Device Buffer Overflow Vulnerability (CNVD-2020-40835)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have a security vulnerability that can be exploited by attackers to perform arbitrary read and write operations...
CVE-2019-20601
An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos7570, 7580, 7870, 7880, and 8890 chipsets software. RKP memory corruption causes an arbitrary write to protected memory. The Samsung ID is SVE-2019-13921-2 May 2019...
CVE-2019-20601
An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos7570, 7580, 7870, 7880, and 8890 chipsets software. RKP memory corruption causes an arbitrary write to protected memory. The Samsung ID is SVE-2019-13921-2 May 2019...
PT-2020-10577
Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N7.x, O8.x, and P9.0 software Description An issue was discovered that causes RKP memory corruption, leading to an arbitrary write to protected memory. This issue affects Samsung mobile devices with Exynos7570, 7580...
CVE-2019-20601: Out-of-bounds Write
An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos7570, 7580, 7870, 7880, and 8890 chipsets software. RKP memory corruption causes an arbitrary write to protected memory. The Samsung ID is SVE-2019-13921-2 May 2019...