CVE-2017-8120

CVE-2017-8120 affects Huawei UMA products (V200R001 and V300R001) with a privilege-elevation vulnerability caused by insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these weaknesses to gain elevated privileges. Public sources (NVD ...

CVE-2017-8153

Huawei VMall (Android) prior to version 1.5.8.5 contains a privilege-elevation vulnerability due to improper design. An attacker can trick a user into installing a malicious app that can send HTTP requests and execute JavaScript in web pages without Internet permission, potentially causing resour...

CVE-2017-8128

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

CVE-2017-8122

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

CVE-2017-8129

CVE-2017-8129 affects Huawei UMA products (software V200R001 and V300R001). The vulnerability is a privilege-elevation issue caused by insufficient validation/improper processing of parameters, enabling an attacker to craft specific packets to gain elevated privileges. Public details include CVSS...

CVE-2017-8119

The CVE-2017-8119 entry concerns Huawei UMA products (V200R001 and V300R001) with a privilege-elevation vulnerability caused by insufficient validation/improper processing of parameters. Attackers could craft specific packets to exploit these flaws to gain elevated privileges. Connected sources c...

CVE-2017-8123

CVE-2017-8123 concerns the Huawei UMA product (software V200R001) and describes a privilege-elevation vulnerability caused by insufficient validation or improper processing of parameters. The NVD entry attributes an exploitable path via crafted packets that could yield elevated privileges, with C...

CVE-2017-2699

CVE-2017-2699 affects the Huawei Themes app. A privilege-elevation vulnerability arises from lack of validation of uploaded theme packs, allowing an attacker to deliver malicious theme files that, when installed, could execute arbitrary code with elevated privileges. Affected are Huawei devices w...

CVE-2017-8185

The CVE-2017-8185 entry documents a local privilege escalation in Huawei ME906s/ME906S driver where lack of privilege restrictions on certain functions allows a user with local access to modify configuration data containing malicious files, enabling arbitrary code execution. Public references con...

CVE-2017-8122

CVE-2017-8122 affects Huawei UMA product (software V200R001). The vulnerability is a privilege elevation due to insufficient validation or improper processing of parameters, where an attacker could craft specific packets to gain elevated privileges. NVD data shows high base scores (CVSSv2: 7.5 / ...

iBall iB-WRA300N3GT Elevation of Privilege Vulnerability

The iBall iB-WRA300N3GT is a wireless router product from iBall India. The iBall iB-WRA300N3GT using firmware version iB-WRA300N3GT1.1.1 is vulnerable to a power lifting vulnerability. A remote attacker can exploit this vulnerability to gain root privileges...

Google Android Qualcomm Display Mobilization Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, of which Qualcomm Display is one of the components. Qualcomm Display is one of the display components developed by...

CVE-2017-16819

A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to inject arbitrary JavaScript in the nameFirst aka First Name field for the employee details page /employee.html that is then reflected in multiple pages where...

Microsoft ASP.NET Core Elevation of Privilege Vulnerability (CNVD-2017-37114)

Microsoft ASP.NET Core is a cross-platform open source framework from Microsoft. The framework is used to build cloud-based applications such as Web One applications, IoT applications, and mobile backends. A privilege extraction vulnerability exists in Microsoft ASP.NET Core version 2.0. A remote...

Patch Tuesday: Microsoft Releases Update to Fix 53 Vulnerabilities

It's Patch Tuesday—time to update your Windows devices. Microsoft has released a large batch of security updates as part of its November Patch Tuesday in order to fix a total of 53 new security vulnerabilities in various Windows products, 19 of which rated as critical, 31 important and 3 moderate...

November Patch Tuesday: 53 Vulnerabilities and a Massive Adobe Update

This November Patch Tuesday is moderate in volume and severity. Microsoft released patches to address 53 unique vulnerabilities, with 25 focused on Remote Code Execution fixes. Windows OS receives 14 patches, while the lion's share is focused on Browsers, Microsoft Office, and Adobe. According to...

PowerShell Penetration Testing Framework: Nishang

Nishang is an open source framework and collection of powerful PowerShell scripts and payloads that you can use during penetration testing audit, post exploitation phase or other stages of offensive security auditing. Nishang is useful during various phases of a security auditing process and has...

The vulnerability of Xen hypervisors relates to deficiencies in access control, allowing attackers to trigger service failures or increase their privileges.

The vulnerability of Xen hypervisors is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally within a user account of the x86 guest operating system in hardware virtualization mode, to trigger a hypervisor failure or increase their...

Service Assistant GUI Elevation of Privilege Vulnerability in Multiple IBM Products

The IBM Storwize V7000, Storwize V5000, and FlashSystem V9000 are products of IBM Corporation in the U.S.A. The IBM Storwize V7000 and Storwize V5000 are virtualized storage systems.The FlashSystem V9000 is an all-flash enterprise storage The Service Assistant GUI is one of the graphical user...

VMware AirWatch Launcher for Android UI Elevation of Privilege Vulnerability

VMware AirWatch is a suite of enterprise mobility management solutions from VMware, Inc. and VMware AirWatch Launcher for Android is one of the launchers based on the Android platform. A privilege extraction vulnerability exists in versions of VMware AirWatch Launcher for Android prior to 3.2.2. ...