Lucene search
+L

7804 matches found

CNVD
CNVD
added 2017/11/20 12:0 a.m.6 views

Google Android Qualcomm Camera Privilege Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Camera is a camera program developed by Qualcomm. Qualcomm Camera is a camera program developed by Qualcomm...

7.8CVSS7AI score0.00138EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2017/11/17 11:29 p.m.4 views

CVE-2017-16566

On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, which allows remote attackers to read or replace core system files including those used for authentication such as passwd and shadow. This can be abused to take full root level control of the device...

10CVSS5.7AI score0.02562EPSS
SaveExploits0References2
OSV
OSV
added 2017/11/17 11:29 p.m.10 views

CVE-2017-16566

On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, which allows remote attackers to read or replace core system files including those used for authentication such as passwd and shadow. This can be abused to take full root level control of the device...

9.8CVSS5.8AI score0.02562EPSS
SaveExploits0References1
NVD
NVD
added 2017/11/17 11:29 p.m.29 views

CVE-2017-16566

On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, which allows remote attackers to read or replace core system files including those used for authentication such as passwd and shadow. This can be abused to take full root level control of the device...

10CVSS9.6AI score0.02562EPSS
SaveExploits0References1
CVE
CVE
added 2017/11/17 11:0 p.m.54 views

CVE-2017-16566

The CVE-2017-16566 entry affects Jooan IP Camera A5 v2.3.36. Affected component: FTP service that fails to require authentication, enabling remote attackers to read or replace core system files (including passwd and shadow) and potentially obtain full root control of the device. Exploitation deta...

10CVSS9.5AI score0.02562EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2017/11/17 11:0 p.m.41 views

CVE-2017-16566

On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, which allows remote attackers to read or replace core system files including those used for authentication such as passwd and shadow. This can be abused to take full root level control of the device...

9.7AI score0.02562EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2017/11/17 1:59 p.m.19 views

Amazon Promises Fix to Stop Key Service Hack

Researchers at Rhino Security Labs identified a flaw in Amazon’s Key delivery service and Cloud Cam security camera that allows a rogue courier to tamper with the camera and knock it offline, making it appear no one is entering home, when that’s not the case. Amazon Key service allows homeowners ...

1.2AI score
SaveExploits0References1
Packet Storm
Packet Storm
added 2017/11/17 12:0 a.m.62 views

D-Link DCS-936L Cross Site Request Forgery

Exploit Title: D-Link DCS-936L network camera incomplete/weak CSRF protection vulnerability Date: 26/03/2017 Exploit Author: SlidingWindow , Twitter: @KapilKhot Vendor Homepage: http://us.dlink.com/product-category/home-solutions/view/network-cameras/ Version: Tested on DCS-936L with firmware...

8.7AI score0.0245EPSS
SaveExploits5
NVD
NVD
added 2017/11/16 10:29 p.m.30 views

CVE-2017-9696

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer over-read is possible in camera driver function msmispstopstatsstream. Variable streamcfgcmd-numstreams is from userspace, and it is not checked against "MSMISPSTATSMAX"...

7.5CVSS7.2AI score0.00412EPSS
SaveExploits0References1
NVD
NVD
added 2017/11/16 10:29 p.m.27 views

CVE-2017-9702

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a user-space pointer is directly accessed in a camera driver...

7.8CVSS7.2AI score0.00138EPSS
SaveExploits0References1
Prion
Prion
added 2017/11/16 10:29 p.m.23 views

Design/Logic Flaw

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the ISP Camera driver, the contents of an arbitrary kernel address can be leaked to userspace by the function msmispgetstreamcommondata...

5CVSS7.1AI score0.00608EPSS
SaveExploits0References2
NVD
NVD
added 2017/11/16 10:29 p.m.16 views

CVE-2017-11028

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the ISP Camera driver, the contents of an arbitrary kernel address can be leaked to userspace by the function msmispgetstreamcommondata...

7.5CVSS7.1AI score0.00608EPSS
SaveExploits0References2
Prion
Prion
added 2017/11/16 10:29 p.m.21 views

Buffer overflow

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, camera application triggers "user-memory-access" issue as the Camera CPP module Linux driver directly accesses the application provided buffer, which resides in user space. An unchecked...

4.6CVSS7.7AI score0.00137EPSS
SaveExploits0References1
Prion
Prion
added 2017/11/16 10:29 p.m.21 views

Null pointer dereference

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a user-space pointer is directly accessed in a camera driver...

4.6CVSS7AI score0.00138EPSS
SaveExploits0References1
Prion
Prion
added 2017/11/16 10:29 p.m.17 views

Design/Logic Flaw

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, array access out of bounds may occur in the camera driver in the kernel...

4.6CVSS7.7AI score0.00138EPSS
SaveExploits0References1
NVD
NVD
added 2017/11/16 10:29 p.m.11 views

CVE-2017-11018

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, array access out of bounds may occur in the camera driver in the kernel...

7.8CVSS7.2AI score0.00138EPSS
SaveExploits0References1
Prion
Prion
added 2017/11/16 10:29 p.m.19 views

Design/Logic Flaw

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer over-read is possible in camera driver function msmispstopstatsstream. Variable streamcfgcmd-numstreams is from userspace, and it is not checked against "MSMISPSTATSMAX"...

5CVSS7.2AI score0.00412EPSS
SaveExploits0References1
NVD
NVD
added 2017/11/16 10:29 p.m.24 views

CVE-2017-11029

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, camera application triggers "user-memory-access" issue as the Camera CPP module Linux driver directly accesses the application provided buffer, which resides in user space. An unchecked...

7.8CVSS7.2AI score0.00137EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2017/11/16 10:0 p.m.34 views

CVE-2017-11029

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, camera application triggers "user-memory-access" issue as the Camera CPP module Linux driver directly accesses the application provided buffer, which resides in user space. An unchecked...

7.1AI score0.00137EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2017/11/16 10:0 p.m.28 views

CVE-2017-11028

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the ISP Camera driver, the contents of an arbitrary kernel address can be leaked to userspace by the function msmispgetstreamcommondata...

7.1AI score0.00608EPSS
SaveExploits0References2
Rows per page
Query Builder