Google Android System Remote Code Execution Vulnerability (CNVD-2018-07453)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in the avrcparsvendorcmd of the avrcparstg.cc file in Android, which stems from a lack of boundary detection in the program. A remote...

Google Android Remote Code Execution Vulnerability (CNVD-2018-07862)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in the ihevcdfmtconv.c file of ihevcdfmtconv in Android, which stems from a lack of boundary detection in the program. A remote attack...

Google Android Broadcom Component Remote Code Execution Vulnerability (CNVD-2018-07445)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the Broadcom Bcmdhd driver is a Broadcom WiFi driver used in it. A remote code execution vulnerability exists in the Broadcom bcmdhd driver in Android, which stems from the...

Google Android NFC Driver Elevation of Privilege Vulnerability

Android is a set of Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA for short.NFC Near Field Communication driver is one of the Near Field Communication drivers. The NFC driver in Android suffers from a boost vulnerability that stems from th...

Google Android System Denial of Service Vulnerability (CNVD-2018-07451)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A denial of service vulnerability exists in the avrcctrlparsvendorrsp in the avrcparsct.cc file in Android, which stems from a lack of boundary detection in the program. A remote...

Google Android System Remote Code Execution Vulnerability (CNVD-2018-07449)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in avrcctrlparsvendorrsp in bluetooth avrcpctrl in Android, which stems from a lack of boundary detection in the program. A remote...

Google Android Framework Information Disclosure Vulnerability (CNVD-2018-07700)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the Framework component of Google Android 8.0, 8.1. The vulnerability stems from the program's failure to properly detec...

Google Android Buffer Overflow Vulnerability (CNVD-2018-07861)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A stack overflow vulnerability exists in the CProgramConfigReadHeightExt of the tpdecasc.cpp file in Android, which stems from a lack of boundary detection in the program. A remot...

Google Android System elevation of privilege vulnerability (CNVD-2018-07448)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in avrcctrlparsvendorrsp of bluetooth avrcpctrl in Android, which stems from a lack of boundary detection in the program. A remote...

Apache HTTP Server mod_authnz_ldap Denial of Service Vulnerability

Apache httpd is the U.S. Apache Apache Software Foundation, an open source HTTP server developed and maintained specifically for modern operating systems. A security vulnerability exists in modauthnzldap in Apache httpd versions 2.0.23 through 2.0.65, 2.2.0 through 2.2.34, and 2.4.0 through 2.4.2...

ARM mbed TLS integer overflow vulnerability

ARM mbed TLS is a product that provides secure communication and encryption capabilities for mbed products. An integer overflow vulnerability exists in ARM mbed TLS. Due to a failure in the sslparseclientpskidentity function, the affected software fails to properly perform boundary checks. An...

Crashmail 1.6 - Stack-Based Buffer Overflow (ROP)

Crashmail 1.6 - Stack-Based Buffer Overflow ROP Exploit author: Juan Sacco Website: http://exploitpack.com Description: Crashmail is prone to a stack-based buffer overflow because the application fails to perform adequate boundary checks on user supplied input. Impact: An attacker could exploit...

The vulnerability of the rds_message_alloc_sgs() function in the Linux operating system allows a hacker to perform write operations beyond the buffer boundaries in memory.

The vulnerability of the rdsmessageallocsgs function in the Linux operating system is related to insufficient checks on the data used by the direct memory access mechanism. Exploiting this vulnerability could allow an attacker to write data beyond the buffer boundaries in memory...

Crashmail 1.6 Buffer Overflow

Exploit author: Juan Sacco Website: http://exploitpack.com Description: Crashmail is prone to a stack-based buffer overflow because the application fails to perform adequate boundary checks on user supplied input. Impact: An attacker could exploit this vulnerability to execute arbitrary code in t...

Google Android NVIDIA libnvrm information disclosure vulnerability (CNVD-2018-05939)

Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.NVIDIA libnvrm is one of the code libraries for the NVIDIA Tegra products. An information disclosure vulnerability...

Google Android NVIDIA libnvrm information disclosure vulnerability (CNVD-2018-05940)

Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.NVIDIA libnvrm is one of the code libraries for the NVIDIA Tegra products. An information disclosure vulnerability...

hw: cpu: speculative execution bounds-check bypass

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly used performance optimization. There are three primary variants of the issue which differ in the way the speculative execution can be exploited. Variant...

Microsoft ASP.NET CVE-2018-0808 Denial Of Service Vulnerability

Description Microsoft ASP.NET is prone to a denial-of-service vulnerability. Successful exploits will attackers to cause a denial of service condition. Technologies Affected Microsoft ASP.NET Core 2.0 Recommendations Block external access at the network boundary, unless external parties require...

Microsoft Internet Explorer CVE-2018-0942 Remote Privilege Escalation Vulnerability

Description Microsoft Internet Explorer is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Internet Explorer 11 is vulnerable. Technologies Affected Microsoft Internet Explorer 11...

Microsoft Exchange Server CVE-2018-0924 Information Disclosure Vulnerability

Description Microsoft Exchange Server is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Exchange Server 2010 SP3 Update Rollup 20 Microsoft Exchange Serve...