Lucene search
+L

6598 matches found

OSV
OSV
added 2017/03/08 1:59 a.m.12 views

CVE-2017-0489

An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system protections for location data. This issue is rated as Moderate because it could be used to generate inaccurate data. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1,...

5.5CVSS7.3AI score0.00392EPSS
SaveExploits0References4
NVD
NVD
added 2017/03/08 1:59 a.m.25 views

CVE-2017-0489

An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system protections for location data. This issue is rated as Moderate because it could be used to generate inaccurate data. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1,...

5.5CVSS5AI score0.00392EPSS
SaveExploits0References4
OSV
OSV
added 2017/03/08 1:59 a.m.9 views

UBUNTU-CVE-2017-0489

An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system protections for location data. This issue is rated as Moderate because it could be used to generate inaccurate data. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1,...

5.5CVSS6.4AI score0.00392EPSS
SaveExploits0References3
Prion
Prion
added 2017/03/08 1:59 a.m.27 views

Privilege escalation

An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system protections for location data. This issue is rated as Moderate because it could be used to generate inaccurate data. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1,...

4.3CVSS5.2AI score0.00392EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2017/03/08 1:59 a.m.31 views

CVE-2017-0489

An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system protections for location data. This issue is rated as Moderate because it could be used to generate inaccurate data. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1,...

5.5CVSS6.4AI score0.00392EPSS
SaveExploits0References2
CVE
CVE
added 2017/03/08 1:00 a.m.65 views

CVE-2017-0489

CVE-2017-0489 is an elevation-of-privilege vulnerability in Android’s Location Manager that could allow a local malicious app to bypass OS protections for location data. Affected products/versions are Android 4.4.4 through 7.1.1 (including 5.x, 6.x, 7.0, 7.1.1). The issue is described as Moderate...

5.5CVSS5.5AI score0.00392EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2017/03/08 1:00 a.m.32 views

CVE-2017-0489

An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system protections for location data. This issue is rated as Moderate because it could be used to generate inaccurate data. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1,...

5.6AI score0.00392EPSS
SaveExploits0References3
OSV
OSV
added 2017/03/03 3:59 p.m.8 views

UBUNTU-CVE-2017-5615

cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location...

6.1CVSS7.2AI score0.01136EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2017/03/03 3:00 p.m.29 views

CVE-2017-5615

cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location...

6.2AI score0.01136EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2017/03/02 8:00 p.m.27 views

CVE-2017-5230

The Java keystore in all versions and editions of Rapid7 Nexpose prior to 6.4.50 is encrypted with a static password of 'r@p1d7k3y5t0r3' which is not modifiable by the user. The keystore provides storage for saved scan credentials in an otherwise secure location on disk...

7.1AI score0.01489EPSS
SaveExploits0References3
OSV
OSV
added 2017/02/17 5:59 p.m.20 views

UBUNTU-CVE-2016-6191

Multiple cross-site scripting XSS vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 Description, 2 Location, 3 URL, or 4 Title field...

6.1CVSS6.5AI score0.01193EPSS
SaveExploits0References2
OSV
OSV
added 2017/02/08 9:51 p.m.13 views

SUSE-SU-2017:0427-1 Security update for MozillaFirefox

MozillaFirefox 45 ESR was updated to 45.7 to fix the following issues bsc1021991: MFSA 2017-02/CVE-2017-5378: Pointer and frame data leakage of Javascript objects bsc1021818 MFSA 2017-02/CVE-2017-5396: Use-after-free with Media Decoder bsc1021821 MFSA 2017-02/CVE-2017-5386: WebExtensions can use...

9.8CVSS8.3AI score0.33534EPSS
SaveExploits16References20
RedHat Linux
RedHat Linux
added 2017/02/02 4:38 a.m.9 views

Mozilla: Location bar spoofing with unicode characters (MFSA 2017-02)

URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks in the location bar. This vulnerability affects Thunderbird 45.7, Firefox ESR 45.7, and Firefox 51...

5.3CVSS7.3AI score0.02455EPSS
SaveExploits0References5
OPENSUSE Linux
OPENSUSE Linux
added 2017/02/02 12:13 a.m.97 views

Security update for MozillaFirefox (important)

This update for MozillaFirefox to version 51.0.1 fixes security issues and bugs. These security issues were fixed: CVE-2017-5375: Excessive JIT code allocation allows bypass of ASLR and DEP bmo1325200, boo1021814 CVE-2017-5376: Use-after-free in XSL bmo1311687, boo1021817 CVE-2017-5377: Memory...

0.3AI score0.33534EPSS
SaveExploits24References22
The Hacker News
The Hacker News
added 2017/02/01 7:35 p.m.16 views

WhatsApp may let you Recall Sent Messages and Track Friends Location in Realtime

Are you the victim of sending awkward WhatsApp messages to your friends, families, and colleagues while you're drunk? No need to panic now, as you'll soon be able to recall your drunk or mistakenly sent text messages on WhatsApp – a much-demanded feature. Recall Unread Messages Sent Mistakenly Th...

6.7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2017/01/27 12:00 a.m.45 views

Mozilla Firefox Security Advisories (MFSA2017-01, MFSA2017-02) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

9.8CVSS7.6AI score0.33534EPSS
SaveExploits22References1
Hacker One
Hacker One
added 2017/01/26 8:32 a.m.19 views

X (Formerly Twitter): Attacker can get vine repost user all informations even Ip address and location .

The researcher discovered that an endpoint used for providing information about Vine reposts was unintentionally disclosing the IP address the repost was made from. Upon receiving this report we immediately took steps to correct the issue and updated the misconfigured endpoint the same day the...

6.7AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2017/01/25 9:31 a.m.11 views

Mozilla: Location bar spoofing with unicode characters (MFSA 2017-02)

URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks in the location bar. This vulnerability affects Thunderbird 45.7, Firefox ESR 45.7, and Firefox 51...

5.3CVSS7.3AI score0.02455EPSS
SaveExploits0References5
OSV
OSV
added 2017/01/25 12:00 a.m.7 views

UBUNTU-CVE-2017-5383

URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks in the location bar. This vulnerability affects Thunderbird 45.7, Firefox ESR 45.7, and Firefox 51...

5.3CVSS6.8AI score0.02455EPSS
SaveExploits0References6
Openbugbounty
Openbugbounty
added 2017/01/24 2:45 p.m.13 views

dtdc.in XSS vulnerability

Vulnerable URL: http://www.dtdc.in/location-finder.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13822 VIP website status:| Yes Check dtdc.in SSL connection:| Grade: F...

6.3AI score
SaveExploits0
Rows per page
Query Builder