CVE-2016-6604

NULL pointer dereference in Samsung Exynos fimg2d driver for Android L5.0/5.1 and M6.0 allows attackers to have unspecified impact via unknown vectors. The Samsung ID is SVE-2016-6382...

UBUNTU-CVE-2016-6604

NULL pointer dereference in Samsung Exynos fimg2d driver for Android L5.0/5.1 and M6.0 allows attackers to have unspecified impact via unknown vectors. The Samsung ID is SVE-2016-6382...

CVE-2016-6604

NULL pointer dereference in Samsung Exynos fimg2d driver for Android L5.0/5.1 and M6.0 allows attackers to have unspecified impact via unknown vectors. The Samsung ID is SVE-2016-6382...

CVE-2016-10135

Technical details for CVE-2016-10135 are not publicly provided in the supplied documents; monitor for updates as connected sources do not reveal affected components or remediation.

Code injection

Samsung Note devices with KK4.4, L5.0/5.1, and M6.0 software allow attackers to crash the system by creating an arbitrarily large number of active VR service threads. The Samsung ID is SVE-2016-7650...

CVE-2017-5351

CVE-2017-5351 affects Samsung Note devices running KK (4.4), L (5.0/5.1), and M (6.0). Reported flaw: the system can be crashed by creating an arbitrarily large number of active VR service threads due to a failure to limit these threads. Root cause is described as uncontrolled/unchecked growth of...

CVE-2016-8630

The x86decodeinsn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service host OS crash via a certain use of a ModR/M byte in an undefined instruction...

CVE-2016-8630

The x86decodeinsn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service host OS crash via a certain use of a ModR/M byte in an undefined instruction...

CVE-2016-8630

The x86decodeinsn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service host OS crash via a certain use of a ModR/M byte in an undefined instruction...

UBUNTU-CVE-2016-8630

The x86decodeinsn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service host OS crash via a certain use of a ModR/M byte in an undefined instruction...

CVE-2016-7160

A vulnerability on Samsung Mobile M6.0 devices exists because external access to SystemUI activities is not properly restricted, leading to a SystemUI crash and device restart, aka SVE-2016-6248...

CVE-2016-7160

A vulnerability on Samsung Mobile M6.0 devices exists because external access to SystemUI activities is not properly restricted, leading to a SystemUI crash and device restart, aka SVE-2016-6248...

Design/Logic Flaw

A vulnerability on Samsung Mobile M6.0 devices exists because external access to SystemUI activities is not properly restricted, leading to a SystemUI crash and device restart, aka SVE-2016-6248...

CVE-2016-7160

The CVE CVE-2016-7160 affects Samsung Mobile M(6.0) devices, where external access to SystemUI activities is not properly restricted. The underlying issue causes a SystemUI crash and can lead to a device restart. Public details describe the vulnerable component as part of the SystemUI access cont...

CVE-2016-7090

The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2016-7090

The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2016-7090

CVE-2016-7090 affects Siemens SCALANCE M-800 and S615 modules with firmware before 4.02. The integrated web server fails to set the Secure attribute on the session cookie in HTTPS, enabling cookie capture if the cookie is transmitted in an insecure (HTTP) context. Affected products: SCALANCE M-80...

Dropbear SSH Arbitrary Code Execution Vulnerability

Dropbear is a relatively small SSH server and client. An arbitrary code execution vulnerability exists in Dropbear dbclient, which can be exploited by a remote attacker to execute arbitrary code when a local dbclient user enters a specific -m or -c parameter...

ZKTeco ZKAccess Professional 3.5.3 File Elevation of Privilege Vulnerability

ZKTeco ZKAccess Professional is an access control system. ZKTeco ZKAccess Professional 3.5.3 File Elevation of Privilege Vulnerability, which occurs due to incorrect privileges of an authenticated user with the 'M' flag...

m-fanshop.ch XSS vulnerability

Vulnerable URL: https://www.m-fanshop.ch/catalogsearch/result/?q=999%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 168107...