Lucene search
+L

798 matches found

Cvelist
Cvelist
•added 2016/10/10 10:00 a.m.•44 views

CVE-2015-8950

arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dmammap call...

5.1AI score0.01457EPSS
SaveExploits0References6
Mend
Mend
•added 2016/10/10 10:00 a.m.•2 views

CVE-2015-8950

arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dmammap call...

6.8CVSS0.01457EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/10/10 12:00 a.m.•4 views

CVE-2015-8950: Exposure of Sensitive Information to an Unauthorized Actor

arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dmammap call...

5.5CVSS8AI score0.01457EPSS
SaveExploits0References2
CNVD
CNVD
•added 2016/09/18 12:00 a.m.•4 views

Unspecified Cross-Site Request Forgery Vulnerability in Schneider Electric ION Power Meter

The Schneider Electric ION Power Meter is an electrical power meter. A cross-site request forgery vulnerability exists in the Schneider Electric ION Power Meter. The program fails to properly validate HTTP requests, allowing remote attackers to exploit the vulnerability to perform certain...

7AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2016/09/07 12:00 a.m.•12 views

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the ION driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating locally, to enhance their privileges through a specially created application...

6.9CVSS7.2AI score0.00174EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2016/08/05 8:59 p.m.•12 views

CVE-2016-3849

The ION driver in Android before 2016-08-05 on Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28939740...

7.8CVSS7.3AI score0.00174EPSS
SaveExploits0References2
NVD
NVD
•added 2016/08/05 8:59 p.m.•25 views

CVE-2016-3849

The ION driver in Android before 2016-08-05 on Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28939740...

7.8CVSS7.5AI score0.00174EPSS
SaveExploits0References2
Prion
Prion
•added 2016/08/05 8:59 p.m.•18 views

Code injection

The ION driver in Android before 2016-08-05 on Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28939740...

6.9CVSS7.2AI score0.00174EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2016/08/05 8:00 p.m.•31 views

CVE-2016-3849

The ION driver in Android before 2016-08-05 on Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28939740...

7.5AI score0.00174EPSS
SaveExploits0References2
CVE
CVE
•added 2016/08/05 8:00 p.m.•56 views

CVE-2016-3849

CVE-2016-3849: Privilege escalation via the ION driver on Pixel C; affected Android ION functionality vulnerable to crafted apps before 2016-08-05. Root cause: kernel/ION interaction allows local code execution with high impact. Patch status: patch not publicly available; fix delivered via latest...

7.8CVSS7.5AI score0.00174EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/08/05 12:00 a.m.•5 views

CVE-2016-3849: Undefined Security Weakness

The ION driver in Android before 2016-08-05 on Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28939740...

7.8CVSS7.4AI score0.00174EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2016/08/05 12:00 a.m.•5 views

PT-2016-2665

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the ION driver in the Android operating system, which has inadequate access control. This can be exploited by an attacker to gain privileges via a crafted application. Th...

7.8CVSS0.00174EPSS
SaveExploits0References5
OSV
OSV
•added 2016/07/11 1:59 a.m.•16 views

UBUNTU-CVE-2014-9779

arch/arm/mach-msm/qdsp6v2/msmaudioion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to obtain sensitive information from kernel memory via a crafted offset, aka Android internal bug 28598347 and Qualcomm internal bug CR548679...

7.8CVSS7.3AI score0.00571EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2016/03/11 12:00 a.m.•13 views

PT-2016-2920 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.6 Description: The issue is related to a race condition in the ion ioctl function, which can be exploited by calling ION IOC FREE on two CPUs simultaneously, potentially allowing local users to gain privileges...

9.8CVSS7.3AI score0.15073EPSS
SaveExploits65References171
Huawei
Huawei
•added 2016/01/05 12:00 a.m.•30 views

Security Advisory - DoS Vulnerabilities in Driver of Huawei Smart Phones

There is a Denial of Service DoS vulnerability in ION driver and Maximsmartpadev driver in some Huawei smart phones respectively. An attacker may trick a user into installing a malicious application and the application can access invalid address of driver to crash the system. Vulnerability ID:...

7.1CVSS5.3AI score0.00846EPSS
SaveExploits0Affected Software2
The Hacker News
The Hacker News
•added 2015/09/18 1:41 a.m.•15 views

Researchers to Develop Long-Lasting Solid-State Batteries

Whenever you go to Buy any Electronic Gadget — Phone, Tablet, Laptop, Watch — the most important specification isn’t its processor speed or its camera quality. It’s how long the device’s battery backup is. Imagine easy access to such batteries that provide more battery power after charging it onc...

6.9AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2015/04/08 9:16 a.m.•18 views

Aluminium Battery that Charges SmartPhone in Just 1 Minute

Most of us could not imagine our lives without Smartphone, but the most annoying part of Smartphone remains its battery life. No matter how power efficient our device would be, the smart display, faster performance and several apps running on our phones end up consuming all of it. Now, I am here...

6.8AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•22 views

ION Script 1.4 - Remote File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6091/info A vulnerability has been discovered in ION Script. By sending a malicious HTTP request to a webserver running the vulnerable ION Script package, it is possible for a remote attacker to disclose arbitrary webserv...

7.1AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2013/10/04 8:22 a.m.•13 views

13 Anonymous Members indicted and accused of participating in 'Operation Payback'

A U.S. Grand jury indicted and accused 13 members of the hacking group Anonymous for allegedly participating in the cyber attacks against a number of websites as an anti-copyright campaign called "Operation Payback" Hackers took down the sites by inflicting a denial of service, or DDoS, attack,...

6.9AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2013/10/03 9:22 p.m.•22 views

13 Anonymous Members indicted and accused of participating in 'Operation Payback'

A U.S. Grand jury indicted and accused 13 members of the hacking group Anonymous for allegedly participating in the cyber attacks against a number of websites as an anti-copyright campaign called "Operation Payback" Hackers took down the sites by inflicting a denial of service, or DDoS, attack,...

6.9AI score
SaveExploits0
Rows per page
Query Builder