1258 matches found
The vulnerability of the Android operating system, which allows a hacker to delete user data
The vulnerability of the Wi-Fi component of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to delete user data remotely...
Google Android Wi-Fi elevation of privilege vulnerability (CNVD-2017-03827)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, with Wi-Fi as one of the wireless connectivity components. An elevation of privilege vulnerability exists in Google Android Wi-Fi. An attacker can exploit this vulnerability to...
CVE-2017-0490
An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to delete user data. This issue is rated as Moderate because it is a local bypass of user interaction requirements that would normally require either user initiation or user permission. Product: Android...
Hadoop, CouchDB Next Targets in Wave of Database Attacks
Insecure Hadoop and CouchDB installations are the latest targets of cybercriminals who are hijacking and deleting data. Last week, security researchers said 28,000 MongoDB and Elasticsearch installations were hacked in a new wave of attacks against unprotected open source data management platform...
IBM Kenexa LMS on Cloud SQL Injection Vulnerability (CNVD-2017-00565)
IBM Kenexa LMS on Cloud is a configurable, enterprise-grade social learning management system LMS from IBM that integrates social networking, collaboration, and knowledge sharing capabilities. The system provides interactive features and supports users to evaluate learning content and share their...
CVE-2016-6844
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within SVG files is maintained when opening such files "in browser" based on our Mail or Drive app. In case of "a" tags, this may include link targets with base64 encoded "data" references. Malicious script code c...
Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris Component
Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A local security vulnerability exists in the Kernel Zones subcomponent of the Solaris component of Oracle Sun Systems Products Suite, version 11.3. An...
Unspecified Vulnerability in Oracle Fusion Middleware Oracle Outside In Technology Component (CNVD-2016-10062)
Oracle Outside In Technology is the United States Oracle Oracle company's set of software development kit SDK, which provides developers with a set of access, conversion and control of a variety of unstructured format files, a comprehensive solution. A remote security vulnerability exists in the...
Unspecified Vulnerability in Oracle E-Business Suite Customer Interaction History Component
Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle Corporation, of which Oracle Customer Interaction History is one of the customer interaction history management components. A remote security vulnerability exists in the...
Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Enterprise Manager Base Platform Component
Oracle Enterprise Manager Grid Control is a suite of systems management software from Oracle USA. The software provides centralized monitoring, lifecycle management, and other functions for the Oracle IT architecture.Oracle Enterprise Manager Base Platform is one of the system management platform...
IMALL E-commerce Management System of Xiamen Techflood Software Co.
IMALL is an e-commerce management system of Xiamen Techflood Software Co. A design vulnerability exists in the IMALL e-commerce management system of Xiamen Techflood Software Co. An attacker can exploit the vulnerability to obtain database information and delete any order data in the database...
CVE-2016-3853
Google Play services in Android before 2016-08-05 on Nexus devices allow local users to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 26803208...
CVE-2016-3853
Google Play services in Android before 2016-08-05 on Nexus devices allow local users to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 26803208...
Design/Logic Flaw
Google Play services in Android before 2016-08-05 on Nexus devices allow local users to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 26803208...
CVE-2016-3853
Google Play services in Android before 2016-08-05 on Nexus devices allow local users to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 26803208...
The vulnerability of the Android operating system, which allows a hacker to bypass security measures and delete data
The vulnerability of the Setup Wizard component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker acting locally to bypass security measures and delete data...
The vulnerability of the Android operating system, which allows a hacker to bypass security measures and delete data
The vulnerability in the CallsManager.java function of the server/telecom component of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating locally, to bypass security measures and delete data...
The vulnerability of Microsoft Lync Server software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
A vulnerability that allows for remote execution of code exists in vulnerable components and is related to the processing of specially crafted font files. Exploiting this vulnerability enables remote execution of code, provided that the user opens a specially crafted file or webpage. Exploiting...
Huawei Mate 8 Security Bypass Data Deletion Vulnerability
Huawei Mate 8 is a smartphone product of Huawei, China. A security bypass data deletion vulnerability exists in Huawei Mate 8. An attacker can exploit the vulnerability to build specially crafted apps to bypass permission checks and delete user data...
CVE-2016-5231
Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and delete user data via a crafted app...