8 matches found
CVE-2018-9384
CVE-2018-9384 identifies a vulnerability in the Kernel component of Google Pixel and Nexus devices. The flaw allows an attacker with System execution privileges to bypass KASLR (Kernel Address Space Layout Randomization) due to an unusual root cause, potentially leading to local information discl...
CVE-2018-9376
A vulnerability exists in the drivers/misc/mediatek/eccci/port_rpc.c file within the rpc_msg_handler and related handlers. Due to an incorrect bounds check , an out-of-bounds write can occur, potentially allowing for local escalation of privilege requiring System execution privileges. This issue ...
CVE-2017-13314
CVE-2017-13314 affects Android by with a missing permission check in NetworkManagementService.setAllowOnlyVpnForUids, enabling local escalation of privilege to access non-VPN networks when VPN-only access is intended. The issue is described as a security settings bypass in NetworkManagementServic...
CVE-2017-13227
The CVE-2017-13227 issue affects the Android Autofill framework specifically stating that the package name provided by the app process is trusted inappropriately, leading to potential information disclosure with no additional privileges required. The description indicates a local attack vector wi...
CVE-2017-1579
CVE-2017-1579 is addressed in IBM DOORS Next Generation (DNG/RRC). The IBM Security Bulletin reports a cross-site scripting vulnerability in the Web UI of Rational DOORS Next Generation, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials within a trusted sessi...
CVE-2021-0792
Android 12 Security Release Notes enumerate CVE-2021-0792 in the System group as an Information Disclosure (Type: ID) vulnerability with Android bug ID A-180938364 and a Moderate severity. The document does not provide exploitable details, affected subcomponents beyond the System classification, ...
CVE-2020-26691
IBM’s bulletin for IBM Rational Build Forge 8.0.x lists CVE-2020-26691 as one of several vulnerabilities affecting Build Forge 8.0–8.0.0.20. The connected document provides remediation: upgrade to IBM Rational Build Forge 8.0.0.21, which includes Apache HTTP Server 2.4.52. The description for CVE...