The vulnerability of the system call in the TrustZone of the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone system call in the Android CAF-release operating system arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the system call in the TrustZone of the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone-based system call in the Android CAF-release operating system is related to pointer swapping errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Android operating system from the CAF repository exists due to the lack of checks on buffer size, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android operating system from the CAF repository arises from the lack of checks for buffer sizes in mechanisms designed to protect against malicious software. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the Android operating system from the CAF repository exists due to deficiencies in access control to the file system. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system Android from the CAF repository is related to deficiencies in access control to the file system. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Keymaster component of the Android operating system from the CAF repository allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Keymaster component of the Android operating system from the CAF repository is related to the lack of checks on buffer size. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability in the IMS multimedia message transmission subsystem of the RCS standard in the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the IMS multimedia message transmission subsystem of the RCS standard in the Android operating system’s CAF builds is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and...

The vulnerability of the UE component in the Android CAF-release operating system allows a perpetrator to compromise privacy, integrity, and accessibility.

The vulnerability of the UE component in the Android CAF-release operating system is related to positioning errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information when the UE driver sends unprotected...

The vulnerability of the Linux operating system’s kernel, which arises due to the lack of checks for buffer length, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system’s kernel arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to trigger buffer overflows and compromise the confidentiality, integrity, and accessibility of protect...

PT-2017-4158

Name of the Vulnerable Software and Affected Versions NGINX versions prior to 1.13.6 Description The issue is related to the autoindex module's incorrect handling of years exceeding four digits, which can cause an integer overflow. This can be triggered by a file with a modification date in the...

Attacking Critical Infrastructure: The Evolution Of Kinetic Warfare

I said earlier in 2017 I believed it was quite possible that during the year a major cyberattack will occur in either the United States, the United Kingdom, or another friendly country that will require a response equivalent to a kinetic attack. In other words, a cyberattack will occur that will ...

JDK: unspecified vulnerability fixed in 6u161, 7u151, and 8u141 (Deployment)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Deployment. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successfu...

Code injection

Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ before 11.72 allows physically proximate attackers to sign arbitrary data with previously loaded signing keys, extract the device identification key KNETI and impersonate the nShield Connect device on a network, affect...

CVE-2017-12933

Removed by vendor...

JDK: unspecified vulnerability fixed in 6u161, 7u151, and 8u141 (Deployment)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Deployment. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successfu...

Oracle PeopleSoft Enterprise PRTL Interaction Hub Unauthorized Operation Vulnerability (CNVD-2017-28378)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PRTL Interaction Hub is one of the enterprise and Customer Interaction...

Oracle FLEXCUBE Universal Banking Remote Vulnerability (CNVD-2017-21149)

Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking, and property management.Oracle FLEXCUBE Universal Banking is one of the real-time, online coverage of retail, group...Oracle FLEXCUBE Universal Banking is a...

Oracle FLEXCUBE Private Banking Remote Vulnerability (CNVD-2017-21031)

Oracle Financial Services Applications is a set of core banking, online banking and property management financial services software from Oracle Corporation, of which Oracle FLEXCUBE Private Banking is a private banking component. A security vulnerability exists in the Operations subcomponent of t...

Oracle Java SE Remote Vulnerability (NVD-C-2017-99467)

Oracle Java SE is the United States Oracle Oracle company's set of standard version of the Java platform for the development and deployment of desktop, server, and embedded devices and real-time environments in the Java application. A security vulnerability exists in the Deployment subcomponent o...

The vulnerability of the Inffast component of the zlib library allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Inffast component Inffast.c in the zlib library arises due to errors in number processing. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information by performing operations with...

Oracle FLEXCUBE Private Banking Remote Vulnerability (CNVD-2017-21030)

Oracle Financial Services Applications is a set of core banking, online banking and property management financial services software from Oracle Corporation, of which Oracle FLEXCUBE Private Banking is a private banking component. A security vulnerability exists in the FileUploads subcomponent of...