Improper access control

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...

Mageia: Security Advisory (MGASA-2014-0330)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0336)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from a memory leak in the kernel in the mbochs ioctl in samples/vfio-mdev/mbochs.c on the Virtual Function IO VFIO media device. This...

UVI-2021-1000061 media: dvbdev: Fix memory leak in dvb_media_device_free()

media: dvbdev: Fix memory leak in dvbmediadevicefree This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1485)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way the Linux kernel's Crypto subsystem handled automatic loading of kernel modules. A local user could u...

Advantech WebAccess nvA1Media DeviceType 3 Stack Buffer Overflow Remote Code Execution Vulnerability

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A stack buffer overflow remote code execution vulnerabilit...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability in the drivers/media/media-device.c file of Linux kernel versions up to 3.11 in Android operating systems is related to improper initialization of certain data structures. Exploiting this vulnerability allows a remote attacker to obtain confidential information through a special...

Android on Nexus Information Disclosure Vulnerability (CNVD-2016-06228)

Android on Nexus 5 and 7 is an open source operating system for the Nexus 5 and 7 smartphones based on Linux, developed by Google and the Open Handset Alliance OHA.The Linux kernel is the kernel used by Linux, the operating system released by the Linux Foundation in the United States. Linux kerne...

CVE-2014-9895

drivers/media/media-device.c in the Linux kernel before 3.11, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly initialize certain data structures, which allows local users to obtain sensitive information via a crafted application, aka Android internal bug...

DEBIAN-CVE-2014-9895

drivers/media/media-device.c in the Linux kernel before 3.11, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly initialize certain data structures, which allows local users to obtain sensitive information via a crafted application, aka Android internal bug...

UBUNTU-CVE-2014-9895

drivers/media/media-device.c in the Linux kernel before 3.11, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly initialize certain data structures, which allows local users to obtain sensitive information via a crafted application, aka Android internal bug...

CVE-2014-9895

drivers/media/media-device.c in the Linux kernel before 3.11, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly initialize certain data structures, which allows local users to obtain sensitive information via a crafted application, aka Android internal bug...

Microsoft Windows Server Untrusted Search Path Vulnerability

Microsoft Windows Server is a series of servers based on the windows operating system launched by the U.S. Microsoft Microsoft. An untrusted search path vulnerability exists in Windows Media Device Manager in MMicrosoft Windows. It allows local users to gain privileges via a Trojan horse DLL in t...

CVE-2015-2369

Untrusted search path vulnerability in Windows Media Device Manager in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a...

Remote code execution

Untrusted search path vulnerability in Windows Media Device Manager in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a...

CVE-2015-2369

Untrusted search path vulnerability in Windows Media Device Manager in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a...

CVE-2015-2369

CVE-2015-2369 describes an untrusted search path vulnerability in Windows Media Device Manager that allows local privilege escalation by placing a malicious DLL in the current directory, demonstrated via a crafted .RTF file. Affected OS versions include Windows Server 2003 SP2, Windows Vista SP2,...

Microsoft DLL Planting Remote Code Execution (MS15-069: CVE-2015-2369)

A remote code execution vulnerability has been reported in Media Device Manager. The vulnerability is due to an error in the way Microsoft Windows improperly handles the loading of DLL files. A remote attacker can exploit this issue by enticing a user to open a specially crafted file...

KLA10631 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities have been found in Microsoft products. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Unknown vulnerability can b...