CVE-2019-17404

Nokia IMPACT 18A: allows full path disclosure...

Cross site scripting

Nokia IMPACT 18A: has Reflected self XSS...

Path traversal

Nokia IMPACT 18A: allows full path disclosure...

Unrestricted file upload

Nokia IMPACT 18A: An unrestricted File Upload vulnerability was found that may lead to Remote Code Execution...

CVE-2019-17406

Nokia IMPACT

CVE-2019-17406

Nokia IMPACT 18A has path traversal that may lead to RCE if chained with CVE-2019-1743...

CVE-2019-17405

CVE-2019-17405 affects Nokia IMPACT platforms earlier than version 18A, with a reflected self-XSS vulnerability. Connected sources identify Nokia IMPACT as the affected product and attribute the issue to improper validation of client-side data by the web application, enabling an attacker to execu...

CVE-2019-17405

Nokia IMPACT 18A: has Reflected self XSS...

CVE-2019-17404

Nokia IMPACT 18A: allows full path disclosure...

CVE-2019-17404

CVE-2019-17404 concerns Nokia IMPACT before version 18A, where a path traversal flaw allows an attacker to disclose the full filesystem path. The issue is described across multiple sources (CNVD-2019-44224, Red Hat RH:CVE-2019-17404, NVD CVE-2019-17404). The connected documents do not provide exp...

CVE-2019-17403

CVE-2019-17403 : Nokia IMPACT versions prior to 18A contain an unrestricted file upload vulnerability that could enable remote code execution. The cited descriptions consistently state this vulnerability for Nokia IMPACT, with no explicit exploit details or affected subcomponents beyond the gener...

CVE-2019-17403

Nokia IMPACT 18A: An unrestricted File Upload vulnerability was found that may lead to Remote Code Execution...

IoT Security Challenges in a 5G Era: Expert Advice

When it comes to what we can expect with 5G mobile networks, they promise a more IoT friendly ecosystem, with vast improvements over the current capabilities of the 4G. Providing ultra low-latency and exponentially faster throughput along with sensors that will boast a 10-year battery life 5G pav...

Google July Android Security Bulletin Fixes 3 Critical RCE Bugs

Google has released fixes for three critical remote code execution bugs in the media framework of its Android operating system. These flaws could allow a remote attacker to execute arbitrary code. The flaws are part of Google’s July Android Security Bulletin, which included fixes for 12 critical...

platform.innovation.nokia.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-862182 Security Researcher Implosion Helped patch 1643 vulnerabilities Received 7 Coordinated Disclosure badges Received 29 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

5G Security Challenges: A Vendor's POV

How are vendors preparing themselves for the onslaught of 5G networks from a security standpoint? When it comes to 5G there are a slew of use cases being utilized at the bleeding edge – from smart factories to IoT – but these are also opening up security risks. At the GSMA Mobile 360 Security for...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20190423)

Security Fixes : - Kernel: KVM: potential use-after-free via kvmioctlcreatedevice CVE-2019-6974 - Kernel: KVM: nVMX: use-after-free of the hrtimer for emulation of the preemption timer CVE-2019-7221 Bug Fixes : - rbd: avoid corruption on partially completed bios rhel-7.6.z - xfsvmwritepages deadl...

CVE-2019-7386

A Denial of Service issue has been discovered in the Gecko component of KaiOS 2.5 10.05 platform 48.0.a2 on Nokia 8810 4G devices. When a crafted web page is visited with the internal browser, the Gecko process crashes with a segfault. Successful exploitation could lead to the remote code executi...

CVE-2019-7386

A Denial of Service issue has been discovered in the Gecko component of KaiOS 2.5 10.05 platform 48.0.a2 on Nokia 8810 4G devices. When a crafted web page is visited with the internal browser, the Gecko process crashes with a segfault. Successful exploitation could lead to the remote code executi...

Remote code execution

A Denial of Service issue has been discovered in the Gecko component of KaiOS 2.5 10.05 platform 48.0.a2 on Nokia 8810 4G devices. When a crafted web page is visited with the internal browser, the Gecko process crashes with a segfault. Successful exploitation could lead to the remote code executi...