CVE-2017-0486

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID:...

CVE-2017-0525

An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.1...

CVE-2017-0488

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID:...

CVE-2017-0527

An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2017-0456

An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.1...

CVE-2017-0523

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A...

freetype2: Crash in TT_Get_MM_Var

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://oss-fuzz.com/testcase?key=5651695960850432 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

Google Increases Bug Bounty Payouts by 50% and Microsoft Just Doubles It!

Well, there's some good news for hackers and bug bounty hunters! Both tech giants Google and Microsoft have raised the value of the payouts they offer security researchers, white hat hackers and bug hunters who find high severity flaws in their products. While Microsoft has just doubled its top...

ffmpeg: Crash in ff_vp3_idct_put_sse2

Detailed report: https://oss-fuzz.com/testcase?key=5030788946984960 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDVP6Ffuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDVP6Ffuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7f2edced7540 Crash...

Joomla com_blog v1.6 - (Pid) SQL Injection Vulnerability

Document Title: =============== Joomla comblog v1.6 - Pid SQL Injection Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2037 Release Date: ============= 2017-02-28 Vulnerability Laboratory ID VL-ID: ==================================== 203...

Joomla com_blog v1.6 - (Pid) SQL Injection Vulnerability

Document Title: =============== Joomla comblog v1.6 - Pid SQL Injection Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2037 Release Date: ============= 2017-02-28 Vulnerability Laboratory ID VL-ID: ==================================== 203...

EasyCom AS400 PHP API Buffer Overflow

Credits: John Page AKA Hyp3rlinX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/EASYCOM-PHP-API-BUFFER-OVERFLOW.txt + ISR: ApparitionSec Vendor: ================ easycom-aura.com Product: =========================== EASYCOM AS400 iBMI PHP API...

Super File Explorer 1.0.1 - Arbitrary File Upload Vulnerability

Document Title: =============== Super File Explorer 1.0.1 - Arbitrary File Upload Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2034 Release Date: ============= 2017-02-23 Vulnerability Laboratory ID VL-ID:...

grpc: Heap-buffer-overflow in parse_unix

Detailed report: https://oss-fuzz.com/testcase?key=5834320218423296 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x616000000900 Crash State: parseunix sockaddrcreate...

Citrix XenServer Multiple Security Updates (CTX220771)

Two security issues have been identified within Citrix XenServer. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OpenSSL Update Fixes High Severity DoS Vulnerability

The OpenSSL Software Foundation released an update to the OpenSSL crypto library that patches a vulnerability rated high severity that could allow a remote attacker to cause a denial-of-service condition. OpenSSL released the version 1.1.0e update that fixes flaws found in OpenSSL 1.1.0, accordin...

Lock Photos Album&Videos Safe v4.3 - Directory Traversal

Document Title: =============== Lock Photos Album&Videos Safe v4.3 - Directory Traversal References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2032 Release Date: ============= 2017-02-21 Vulnerability Laboratory ID VL-ID: ====================================...

Album Lock v4.0 iOS - Directory Traversal Vulnerability

Document Title: =============== Album Lock v4.0 iOS - Directory Traversal Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2033 Release Date: ============= 2017-02-20 Vulnerability Laboratory ID VL-ID: ====================================...

Album Lock v4.0 iOS - Directory Traversal Vulnerability

Document Title: =============== Album Lock v4.0 iOS - Directory Traversal Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2033 Release Date: ============= 2017-02-20 Vulnerability Laboratory ID VL-ID: ====================================...

libtsm: Bad-cast to const std::__1::__less<unsigned long, unsigned long> *_start

Project: git://people.freedesktop.org/dvdhrm/libtsm Detailed report: https://oss-fuzz.com/testcase?key=4858886169296896 Project: libtsm Fuzzer: libFuzzerlibtsmfuzzer Fuzz target binary: libtsmfuzzer Job Type: libfuzzerubsanlibtsm Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffe13981c...