206 matches found
Denial Of Service (DoS)
liblcms2.so is vulnerable to denial of service. The vulnerability exists in the AllocateDataSet function of cmscgats.c because of not limiting the size of the Data from integer multiplication, leading to an attack if a malicious IT8 calibration file is passed to the second argument to...
Debian DSA-4284-1 : lcms2 - security update
Quang Nguyen discovered an integer overflow in the Little CMS 2 colour management library, which could result in denial of service and potentially the execution of arbitrary code if a malformed IT8 calibration file is processed. C Tenable Network Security, Inc. The descriptive text and package...
Google Android has an unspecified vulnerability (CNVD-2018-10115)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm MDM9615 and other central processing unit CPU products from Qualcomm. A security vulnerability exists in the Qualcomm closed-source component in Android 2018-04-05 an...
CVE-2014-10057
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 435, SD 617, SD 625, and SnapdragonHighMed2016, binary Calibration files under data/misc/audio have 777...
Google Android Qualcomm WLAN Integer Overflow Vulnerability
Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm WLAN is a wireless LAN component developed by Qualcomm. An integer overflow vulnerability exists in the 'wmaunifiedlinkradiostatseventhandler' function of Qualcomm WLAN in...
Design/Logic Flaw
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when memory allocation fails while creating a calibration block in createcalblock stale pointers are left uncleared...
CVE-2017-11016
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when memory allocation fails while creating a calibration block in createcalblock stale pointers are left uncleared...
CVE-2017-8280
In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store and retrieve operation, there are some potential race conditions which lead to a memory leak and a buffer overflow during the context switch...
Huawei Mate 9 DoS Vulnerability
Huawei Mate 9 is a smartphone from Chinese company Huawei Huawei. The Huawei Mate 9 is vulnerable to a DoS attack. An attacker can exploit the vulnerability to trick users into installing a malicious application, which can cause some system functions to become unavailable due to the system's...
Android Qualcomm Sound Card Driver Information Disclosure Vulnerability
Android is an open source operating system based on Linux. A security vulnerability in the sound/soc/msm/qdsp6v2/audiocalibration.c file in the Qualcomm sound card driver for Android allows remote attackers to exploit the vulnerability to build malicious applications and obtain sensitive...
CVE-2016-3860
sound/soc/msm/qdsp6v2/audiocalibration.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29323142 and Qualcomm internal bug CR 1038127...
modalshop.pl XSS vulnerability
Vulnerable URL: http://www.modalshop.pl/download.asp?file=Detecting-Proximity-Probe-Cabling-Errors-Using-Dynamic-CalibrationMD-0243.pdf" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
Battery Calibration [ROOT] - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Battery Calibration ROOT published at the 'play' market has multiple vulnerabilities...
CVE-2015-7907
Directory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allows remote attackers to bypass authentication, and write to a configuration file or trigger a calibration or test, via unspecified vectors...
Directory traversal
Directory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allows remote attackers to bypass authentication, and write to a configuration file or trigger a calibration or test, via unspecified vectors...
CVE-2015-7907
Directory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allows remote attackers to bypass authentication, and write to a configuration file or trigger a calibration or test, via unspecified vectors...
CVE-2015-7907
CVE-2015-7907 affects Honeywell Midas and Midas Black gas detectors. The web server authentication can be bypassed via a directory traversal vulnerability, allowing remote actors to write to a configuration file or trigger calibration/test. Affected versions: Midas before 1.13b3 and Midas Black b...
Honeywell Midas gas detector is exposed to serious vulnerabilities, and then to industrial safety Alarm bell-vulnerability warning-the black bar safety net
! Well-known high-tech manufacturing company Honeywell recently released a firmware update package to fix Midas gas detector of two high-risk vulnerabilities. This is a turnover of 3 0 0 the multi-billion-dollar diversified technology and manufacturing company in the world has its business...
SA-CONTRIB-2015-075 - Perfecto - Open Redirect
The Perfecto module allows themers accurately calibrate the CSS by floating compositions over the page. The module doesn't sufficiently check user supplied URLs in parameters used for page redirection. An attacker could trick users to visit malicious sites without realizing it. CVE identifiers...
Realtek-Audio-Microphone-Calibration-1.1.1.6
App. has classic buffer overflow vulnerability it can be triggered by passing too long argument as a startup parameter. Shellcode can by run via classic ret overwrite or SEH Handler overwrite filepath = "C:\ShellCode\MicCal 1.1.1.6 - Exploit.bin" f = openfilepath, "wb" dummy data f.write'\x90'...