147 matches found
Privilege escalation
An elevation of privilege vulnerability in the MediaTek power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A...
Code injection
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code...
Design/Logic Flaw
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...
CVE-2010-4314
Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5.42 for Windows XP/Vista/Win7 to execute code by overflowing the "name" parameter...
CVE-2017-0464
An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...
Privilege escalation
An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...
CVE-2016-4390
The CVE-2016-4390 entry relates to HPE KeyView’s Filter SDK (versions 10.18–10.24). A remote code execution vulnerability exists in this component, allowing an attacker to run arbitrary code on a vulnerable system via unspecified vectors. Several connected CNVD entries corroborate the existence o...
MGASA-2016-0288 Updated bsdiff packages fix security vulnerability
Integer signedness error in bspatch.c in bspatch in bsdiff allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via a crafted patch file CVE-2014-9862...
CVE-2016-2838
CVE-2016-2838: A heap-based buffer overflow in Mozilla Firefox's nsBidi::BracketData::AddOpening function (affecting Firefox before 48.0 and Firefox ESR 45.x before 45.3) can be triggered by directional content in an SVG document, potentially allowing remote code execution. The vulnerability is c...
Memory corruption
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4172,...
openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2016:1653-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Hangman - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Hangman published at the 'play' market has multiple vulnerabilities...
Find Difference 7 - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Find Difference 7 published at the 'play' market has multiple vulnerabilities...
aa - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application aa published at the 'play' market has multiple vulnerabilities...
Memory corruption
Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2016-1735...
CVE-2016-0973
Use-after-free vulnerability in the URLRequest object implementation in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before...
magento1. 9. 0. 1 PHP object injection analysis-vulnerability warning-the black bar safety net
Original: https://websec.wordpress.com/2014/12/08/magento-1-9-0-1-poi/ The use of unserializefunction to cause code execution vulnerability not new things, but in this article are a few of the more interesting use of points or that technique, although not a common technique, but the idea was good...
Heap overflow
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute...