CVE-2014-9801

Multiple integer overflows in lib/libfdt/fdtrw.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28822060 and Qualcomm internal bug CR705078...

CVE-2014-9786

Heap-based buffer overflow in drivers/media/platform/msm/camerav2/sensor/actuator/msmactuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28557260 and Qualcomm...

CVE-2014-9796

CVE-2014-9796 affects Android on Nexus 5 and Nexus 7 (2013) via the Qualcomm component’s app/aboot/aboot.c, where the kernel header page size is not validated, enabling a crafted boot image to bypass access restrictions. Public details are tied to Android/Qualcomm bug references (28820722, CR6847...

CVE-2014-9802

CVE-2014-9802: Concrete details found in CNVD-2016-04811 and related records show an integer overflow in lib/libfdt/fdt.c within the Qualcomm component on Android, affecting Nexus 5 and Nexus 7 (2013) devices. Root cause: integer overflow in the FDT parser leads to privilege escalation when proce...

CVE-2015-8888

Integer overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to bypass intended access restrictions via a crafted block count and block size of a sparse header, aka Android internal bug 28822465 and Qualcomm internal bug CR81393...

CVE-2014-9788

Multiple buffer overflows in the voice drivers in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28573112 and Qualcomm internal bug CR548872...

CVE-2014-9787

CVE-2014-9787 describes an integer overflow in drivers/misc/qseecom.c of the Qualcomm component used in Android on Nexus 7 (2013) devices. The vulnerability could allow a local attacker to gain privileges via a crafted application, due to the overflow in the Qualcomm qseecom driver. Public detail...

CVE-2014-9800

CVE-2014-9800 is an integer overflow in lib/heap/heap.c within the Qualcomm component of Android on Nexus 5 and Nexus 7 (2013) devices prior to 2016-07-05. The vulnerability could be triggered by a crafted application to gain privileges, as described in multiple sources (Android/Qualcomm internal...

CVE-2015-8889

CVE-2015-8889 concerns the aboot implementation in Qualcomm components within Android on Nexus 6P devices, prior to the 2016-07-05 patch. The description notes that the recovery PIN feature is omitted, with impact and attack vectors listed as unspecified. Connected CNVD-2016-04846 and related CNV...

CVE-2014-9780

The CVE-2014-9780 issue affects the Qualcomm mdp3_ctrl.c driver in Android before 2016-07-05 on Nexus 5, 5X, and 6P. It does not validate start and length values, enabling local privilege escalation via a crafted app. Root cause: improper input validation in the MDSS hardware block. Impact stated...

Vulnerability of the Microsoft Office Web Apps package, the Microsoft Office Compatibility Pack package, the Microsoft Office applications package, the Office Web Apps Server web server, the Word For Mac text editor, the Microsoft Word text editor, the Microsoft SharePoint Server corporate application package, the Office Online Server web server, allowing a perpetrator to execute arbitrary code

The vulnerabilities of the Microsoft Office Web Apps package, the Microsoft Office Compatibility Pack, the Microsoft Office applications, the Office Web Apps Server web server, the Word For Mac text editor, the Microsoft Word text editor, the Microsoft SharePoint Server enterprise application...

Field Trip - ContentProvider mode not defined, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Field Trip published at the 'play' market has multiple vulnerabilities...

Time2Work - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Time2Work published at the 'play' market has multiple vulnerabilities...

절대시계 위젯 - Corrupted files, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application 절대시계 위젯 published at the 'play' market has multiple vulnerabilities...

PrivateWave Professional - Certificates or keys found, Customized SSL, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application PrivateWave Professional published at the 'play' market has multiple vulnerabilities...

UniNow - Die App für's Studium - Certificates or keys found, Customized SSL, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application UniNow - Die App für's Studium published at the 'play' market has multiple vulnerabilities...

FTPServer - Exported components, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application FTPServer published at the 'play' market has multiple vulnerabilities...

Vulnerability of the Java Platform software platform, allowing a remote attacker to compromise the integrity of protected information

The vulnerability of the Java SE and Java SE Embedded software platform allows a remote attacker to compromise data integrity by using subcomponents called Libraries...

Vulnerability of the Java Platform software platform, which allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Java SE software platform allows a malicious actor to compromise the confidentiality, integrity, and accessibility of data by using subcomponents called Libraries...

Vulnerability of the Java Runtime Environment software platform, which allows a malicious attacker to compromise data confidentiality and integrity

Vulnerability of the Java Runtime Environment, related to JavaFX components. Exploiting this vulnerability allows an attacker to compromise data confidentiality and integrity by using JavaFX components...