CVE-2017-9379

Multiple CSRF issues exist in BigTree CMS through 4.2.18 - the clear parameter to core\admin\modules\dashboard\vitals-statistics\404\clear.php and the from or to parameter to core\admin\modules\dashboard\vitals-statistics\404\create-301.php...

The vulnerability of the Input Manager Service in the Android operating system allows a hacker to trigger a temporary service failure, necessitating the correction of user settings.

The vulnerability of the Input Manager Service in the Android operating system is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause temporary service interruptions, necessitating the resetting of user settings to correct the issue...

The vulnerabilities of PDF viewing and editing programs such as Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat allow attackers to cause service failures or execute arbitrary codes.

The vulnerability of PDF viewing and editing programs such as Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat arises from operations that go beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code or cause a service failure...

USN-3305-1: NVIDIA graphics drivers vulnerabilities

It was discovered that the NVIDIA graphics drivers contained flaws in the kernel mode layer. A local attacker could use these issues to cause a denial of service or potentially escalate their privileges on the system...

USN-3305-1 nvidia-graphics-drivers-375 vulnerabilities

It was discovered that the NVIDIA graphics drivers contained flaws in the kernel mode layer. A local attacker could use these issues to cause a denial of service or potentially escalate their privileges on the system...

The vulnerability of the Android operating system’s kernel subsystem allows a hacker to execute arbitrary code.

The vulnerability of the Android operating system’s kernel subsystem is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code within the kernel context, using a local malware application...

The vulnerability of the initial loader of Qualcomm’s Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the initial loader of the Qualcomm Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Synaptics’ sensor screen driver in the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of Synaptics’ touchscreen display driver in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary malicious applications on the touchscreen chipset. This issue is considered “highly...

The vulnerability of the MediaTek driver for the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the MediaTek driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Qualcomm ADSP RPC driver of the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the Qualcomm ADSP RPC driver in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Qualcomm Wi-Fi driver for the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of Qualcomm Wi-Fi driver in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary malicious code within the kernel context. This issue is considered “high” because it requires...

The vulnerability of the Audioserver component of the Android operating system, which allows a hacker to execute arbitrary code.

The vulnerability in the Android operating system’s Audioserver relates to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within a privileged process remotely. This issue is considered “highly critical” because it could be used to...

The vulnerability of the Audioserver application for Android operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Audioserver application for Android operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code through the local malicious application...

The vulnerability of Synaptics’ sensor screen driver in the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of Synaptics’ touchscreen display driver in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary malicious applications on the touchscreen chipset. This issue is considered “highly...

The vulnerability of the FreeBSD operating system’s kernel allows a hacker to gain privileged access and read a portion of the kernel’s memory.

The vulnerability of the FreeBSD operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally, to gain privileged access and read part of the kernel’s memory using undefined vectors...

The vulnerability of the Oracle MySQL database management system allows a hacker to gain privileged access and cause service interruptions.

The vulnerability of the MySQL Server component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain privileged access and cause the system to become unstable or crash using network packets...

The vulnerability of the Oracle VM VirtualBox virtual machine allows a malicious individual to compromise the confidentiality of information.

The vulnerability of the Oracle VM VirtualBox Virtual Machine Component, specifically the Core sub-component, is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating locally, to compromise the confidentiality of information...

The vulnerability of the Oracle MySQL database management system allows a hacker to gain access to read data or modify data.

The vulnerability of the MySQL Server component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to gain access to read, modify, add, or delete data via network packets...

The vulnerability of the Oracle VM VirtualBox virtual machine, which allows a hacker to trigger a service failure

The vulnerability of the Oracle VM VirtualBox Virtual Machine component, specifically the Core sub-component, is related to access control deficiencies. Exploiting this vulnerability could allow an attacker acting locally to cause the system to become unresponsive or crash...

The vulnerability of the Oracle MySQL database management system allows a hacker to gain privileged access when modifying data or causing service failures.

The vulnerability of the MySQL Server component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain privileged access to modify, add, or delete data. This can also cause...