Lucene search
+L

571 matches found

The Hacker News
The Hacker News
added 2019/11/14 11:0 a.m.6 views

Qualcomm Chip Flaws Let Hackers Steal Private Data From Android Devices

Hundreds of millions of devices, especially Android smartphones and tablets, using Qualcomm chipsets, are vulnerable to a new set of potentially serious vulnerabilities. According to a report cybersecurity firm CheckPoint shared with The Hacker News, the flaws could allow attackers to steal...

7.1CVSS7.5AI score0.01589EPSS
SaveExploits1
The Hacker News
The Hacker News
added 2019/11/14 11:0 a.m.110 views

Qualcomm Chip Flaws Let Hackers Steal Private Data From Android Devices

Hundreds of millions of devices, especially Android smartphones and tablets, using Qualcomm chipsets, are vulnerable to a new set of potentially serious vulnerabilities. According to a report cybersecurity firm CheckPoint shared with The Hacker News, the flaws could allow attackers to steal...

7.1CVSS0.8AI score0.01589EPSS
SaveExploits1
CNVD
CNVD
added 2019/11/14 12:0 a.m.6 views

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-16068)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU product.The SDX24 is a modem.The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU...

7.8CVSS7.4AI score0.00202EPSS
SaveExploits0References1
OSV
OSV
added 2019/09/27 7:15 p.m.6 views

CVE-2019-9360

In the TEE, there's a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120610663...

4.4CVSS6.5AI score0.00151EPSS
SaveExploits0References1
OSV
OSV
added 2019/09/27 7:15 p.m.6 views

CVE-2019-9253

In KeyStore, there is a possible storage of symmetric keys in the TEE instead of the strongbox due to a missing strongbox flag. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions:...

4.4CVSS6.5AI score0.00151EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
added 2019/08/22 12:0 a.m.7 views

Update for Windows Server 2008 SP2: August 16, 2019

Update for Windows Server 2008 SP2: August 16, 2019 Summary This non-security update for Windows Server 2008 SP2 includes the quality improvements from KB4512491 released August 16, 2019, in addition to these key changes: Addresses an issue in which the following may stop responding and you may...

6.7AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2019/08/17 12:0 a.m.7 views

August 17, 2019—KB4512499 (Preview of Monthly Rollup)

None None...

6.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/08/14 12:0 a.m.15 views

Honeywell Experion C300 Controller

Binary data 764917.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/08/14 12:0 a.m.18 views

Honeywell Experion C300 Controller

Binary data 764916.prm...

7.3AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2019/08/13 7:0 a.m.1025 views

August 13, 2019—KB4512489 (Security-only update)

None None...

10CVSS6.8AI score0.7575EPSS
SaveExploits12
Tenable Nessus
Tenable Nessus
added 2019/07/31 12:0 a.m.13 views

Honeywell C300 Controller Module

Binary data 764871.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/07/31 12:0 a.m.13 views

Honeywell C200 Controller Module

Binary data 764872.prm...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2019/07/17 12:0 a.m.10 views

Linaro OP-TEE Digit Error Vulnerability

Linaro OP-TEE is an open source trusted execution environment from Linaro UK. A security vulnerability exists in opteeos in Linaro OP-TEE 3.3.0 and earlier versions. An attacker could exploit this vulnerability to disclose passwords and/or data from a previous Trusted Application...

7.5CVSS6.8AI score0.0142EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/17 12:0 a.m.7 views

Linaro OP-TEE Input Validation Error Vulnerability

Linaro OP-TEE is an open source trusted execution environment from Linaro UK. A security vulnerability exists in opteeos in Linaro OP-TEE 3.3.0 and earlier versions. An attacker could exploit this vulnerability to cause TEE memory corruption...

9.8CVSS6.9AI score0.01553EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/16 12:0 a.m.8 views

Linaro OP-TEE Buffer Overflow Vulnerability

Linaro OP-TEE is an open source trusted execution environment from Linaro UK. A buffer overflow vulnerability exists in opteeos in Linaro OP-TEE 3.3.0 and earlier versions. The vulnerability stems from a networked system or product performing operations on memory without properly validating data...

10CVSS7.4AI score0.0388EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/07/15 12:0 a.m.12 views

PT-2019-11549

Name of the Vulnerable Software and Affected Versions: Linaro/OP-TEE versions prior to 3.4.0 Description: The issue is a buffer overflow in the optee os component, allowing execution of code in the TEE core kernel context. Recommendations: For versions prior to 3.4.0, update to version 3.4.0 or...

10CVSS8.4AI score0.02745EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.13 views

The vulnerability of the SMC-processor GLOBAL_CMD_ID_NEED_LOAD_APP in the TEE OS Trusted Core of the Huawei Mate 9 Pro mobile phone operating system allows a perpetrator to trigger a service failure, modify program algorithms (by changing the flags from TRUE/FALSE), or compromise critical data stored in physical memory.

The vulnerability of the SMC-processor GLOBALCMDIDNEEDLOADAPP in the TEE OS Trusted Core of the Huawei Mate 9 Pro mobile phone operating system is related to the lack of validation for input data. Exploiting this vulnerability can allow an attacker to cause service failures, modify program...

6.7CVSS5.5AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2019/06/11 7:0 a.m.85 views

June 11, 2019—KB4503285 (Monthly Rollup)

None None...

9.3CVSS6.8AI score0.48043EPSS
SaveExploits14
Microsoft KB
Microsoft KB
added 2019/06/11 7:0 a.m.133 views

June 11, 2019—KB4503290 (Security-only update)

None None...

9.3CVSS6.8AI score0.48043EPSS
SaveExploits14
Microsoft KB
Microsoft KB
added 2019/06/11 7:0 a.m.284 views

June 11, 2019—KB4503293 (OS Build 18362.175)

None None...

9.3CVSS6.8AI score0.48043EPSS
SaveExploits16
Rows per page
Query Builder