SAP NetWeaver AS Java P4 MSPRUNTIMEINTERFACE Information Disclosure Vulnerability

An anonymous attacker can send a special request and get sensitive information about an SAP system using SAP P4. Application: SAP NetWeaver AS JAVA Versions Affected: SAP NetWeaver AS JAVA 7.11-7.4 Vendor URL: http://SAP.com Bugs: Information disclosure Sent: 10.03.2016 Reported: 11.03.2016 Vendo...

Code injection

The SpamCall Activity component in Telecom application on Samsung Note device L5.0/5.1 and M6.0 allows attackers to cause a denial of service crash and reboot or possibly gain privileges via a malformed serializable object...

CVE-2016-6526

The SpamCall Activity component in Telecom application on Samsung Note device L5.0/5.1 and M6.0 allows attackers to cause a denial of service crash and reboot or possibly gain privileges via a malformed serializable object...

Code injection

The SmartCall Activity component in Telecom application on Samsung Note device L5.0/5.1 and M6.0 allows attackers to cause a denial of service crash and reboot or possibly gain privileges via a malformed serializable object...

CVE-2016-6527

The SmartCall Activity component in Telecom application on Samsung Note device L5.0/5.1 and M6.0 allows attackers to cause a denial of service crash and reboot or possibly gain privileges via a malformed serializable object...

CVE-2016-6526

The SpamCall Activity component in Telecom application on Samsung Note device L5.0/5.1 and M6.0 allows attackers to cause a denial of service crash and reboot or possibly gain privileges via a malformed serializable object...

CVE-2016-6527

CVE-2016-6527 involves the SmartCall Activity in Samsung’s Telecom app on Note devices (L: 5.0/5.1, M: 6.0). The issue arises from a malformed serializable object in the affected component, which can cause a denial of service (crash and reboot) and may allow privilege escalation. Exploitation is ...

CVE-2016-6526

Technical details about CVE-2016-6526 are not publicly provided in the connected documents; available descriptions only summarize impact on Samsung Telecommunication SpamCall component. Monitor for updates and official advisories.

SAP NetWeaver AS Java logon_app OpenRedirect

Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver AS Java 7.11-7.50 Vendor URL: SAP Bug: Open redirect Reported: 18.01.2017 Vendor response: 19.01.2017 Date of Public Advisory: 08.08.2017 Reference: SAP Security Note 2423540 Author: Vahagn Vardanyan ERPScan VULNERABILITY...

Samsung Note Denial of Service Vulnerability

The Samsung Note is a smartphone released by the South Korean company Samsung. Samsung Note devices fail to properly handle exceptions, allowing remote attackers to exploit the vulnerability to build malicious apps that trigger systemUI crashes and denial of service...

Samsung Note Denial of Service Vulnerability (CNVD-2017-00581)

Samsung Note is a smartphone released by the South Korean company Samsung Samsung. A security vulnerability exists in Samsung Note devices that stems from the program's failure to limit the number of active VR service threads. An attacker could cause a system crash by creating a large number of...

UBUNTU-CVE-2016-7431

NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression...

Code injection

Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allow attackers to crash systemUI by leveraging incomplete exception handling. The Samsung ID is SVE-2016-7122...

CVE-2017-5351

Samsung Note devices with KK4.4, L5.0/5.1, and M6.0 software allow attackers to crash the system by creating an arbitrarily large number of active VR service threads. The Samsung ID is SVE-2016-7650...

Code injection

Samsung Note devices with KK4.4, L5.0/5.1, and M6.0 software allow attackers to crash the system by creating an arbitrarily large number of active VR service threads. The Samsung ID is SVE-2016-7650...

CVE-2017-5351

Samsung Note devices with KK4.4, L5.0/5.1, and M6.0 software allow attackers to crash the system by creating an arbitrarily large number of active VR service threads. The Samsung ID is SVE-2016-7650...

CVE-2017-5350

Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allow attackers to crash systemUI by leveraging incomplete exception handling. The Samsung ID is SVE-2016-7122...

CVE-2017-5350

Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allow attackers to crash systemUI by leveraging incomplete exception handling. The Samsung ID is SVE-2016-7122...

CVE-2017-5350

Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allow attackers to crash systemUI by leveraging incomplete exception handling. The Samsung ID is SVE-2016-7122...

CVE-2017-5351

CVE-2017-5351 affects Samsung Note devices running KK (4.4), L (5.0/5.1), and M (6.0). Reported flaw: the system can be crashed by creating an arbitrarily large number of active VR service threads due to a failure to limit these threads. Root cause is described as uncontrolled/unchecked growth of...