Lucene search
+L

7408 matches found

CNVD
CNVD
added 2016/11/25 12:00 a.m.4 views

Samsung Mobile S7 Information Disclosure Vulnerability

Samsung Mobile is a series of smart mobile devices released by the South Korean company Samsung Samsung. A security vulnerability exists in the mDNIe system service on Samsung Mobile S7 devices using software version M 6.0, which stems from the program's failure to properly restrict the...

5.5CVSS6.8AI score0.00936EPSS
SaveExploits0References1
NVD
NVD
added 2016/11/23 11:59 a.m.20 views

CVE-2016-9567

The mDNIe system service on Samsung Mobile S7 devices with M6.0 software does not properly restrict setmDNIeScreenCurtain API calls, enabling attackers to control a device's screen. This can be exploited via a crafted application to eavesdrop after phone shutdown or record a conversation. The...

5.5CVSS5.5AI score0.00936EPSS
SaveExploits0References2
OSV
OSV
added 2016/11/23 11:59 a.m.8 views

CVE-2016-9567

The mDNIe system service on Samsung Mobile S7 devices with M6.0 software does not properly restrict setmDNIeScreenCurtain API calls, enabling attackers to control a device's screen. This can be exploited via a crafted application to eavesdrop after phone shutdown or record a conversation. The...

5.5CVSS5.8AI score0.00936EPSS
SaveExploits0References2
Prion
Prion
added 2016/11/23 11:59 a.m.18 views

Design/Logic Flaw

The mDNIe system service on Samsung Mobile S7 devices with M6.0 software does not properly restrict setmDNIeScreenCurtain API calls, enabling attackers to control a device's screen. This can be exploited via a crafted application to eavesdrop after phone shutdown or record a conversation. The...

4.3CVSS7.1AI score0.00936EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/11/21 12:00 a.m.41 views

Debian DLA-712-1 : gst-plugins-bad0.10 security update

CVE-2016-9445 CVE-2016-9446 Chris Evans discovered that the GStreamer plugin to decode VMware screen capture files allowed the execution of arbitrary code. He also found that an initialized buffer may lead into memory disclosure. CVE-2016-9447 Chris Evans discovered that the GStreamer 0.10 plugin...

7.8CVSS7AI score0.03691EPSS
SaveExploits0References5
OSV
OSV
added 2016/11/20 12:00 a.m.41 views

DLA-712-1 gst-plugins-bad0.10 - security update

Bulletin has no description...

7.8CVSS7.7AI score0.03691EPSS
SaveExploits0
myhack58
myhack58
added 2016/11/19 12:00 a.m.35 views

To bypass the password to access the iPhone photo or message even iOS 1 0 also affected-vulnerability warning-the black bar safety net

Set the iPhone screen lock password to prevent others from accessing your personal data the preferred method, but the lock screen password is also your phone security the first line of Defense, which is for Android also. But you know what? The last few major version of the iOS lock screen to...

SaveExploits0
OSV
OSV
added 2016/11/08 8:59 p.m.8 views

CVE-2016-4961

For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVStreamKMS.sys API layer caused a denial of service vulnerability blue screen crash within the NVIDIA Windows graphics drivers...

5.5CVSS5.8AI score0.00366EPSS
SaveExploits0References3
OSV
OSV
added 2016/11/08 8:59 p.m.8 views

CVE-2016-4959

For the NVIDIA Quadro, NVS, and GeForce products, there is a Remote Desktop denial of service. A successful exploit of a vulnerable system will result in a kernel null pointer dereference, causing a blue screen crash...

7.5CVSS5.8AI score0.02838EPSS
SaveExploits0References4
Prion
Prion
added 2016/11/08 8:59 p.m.27 views

Null pointer dereference

For the NVIDIA Quadro, NVS, and GeForce products, there is a Remote Desktop denial of service. A successful exploit of a vulnerable system will result in a kernel null pointer dereference, causing a blue screen crash...

7.8CVSS7AI score0.02838EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2016/11/08 8:37 p.m.64 views

CVE-2016-4961

CVE-2016-4961 affects NVIDIA Quadro, NVS, and GeForce Windows drivers. The root cause is improper sanitization of parameters in the NVStreamKMS.sys API layer, causing a denial-of-service (blue-screen crash). Affected component is the NVStreamKMS.sys driver; impact is high for availability with lo...

5.5CVSS6AI score0.00366EPSS
SaveExploits0References3Affected Software1
myhack58
myhack58
added 2016/11/04 12:00 a.m.29 views

MS16-1 2 4: Microsoft kernel integer overflow vulnerability-vulnerability warning-the black bar safety net

Foreword Last month I found and reported a Windows registry integer overflow vulnerability, the last week two 2016.10.25)Microsoft released the bug fix patch MS16-1 2 4 and the vulnerability number CVE-2 0 1 6-0 0 7 0's. The vulnerability may lead to local privilege escalation that affects multip...

0.4AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2016/11/02 3:47 p.m.27 views

CVE-2016-1000002

gdm3 3.14.2 and possibly later has an information leak before screen lock...

2.4CVSS1AI score0.00527EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2016/11/02 12:00 a.m.26 views

dotCMS < 3.3.2 SQLi Vulnerability

dotCMS is prone to a SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dotcms:dotcms"; if...

7.2CVSS7.5AI score0.01327EPSS
SaveExploits2References1
CNVD
CNVD
added 2016/10/28 12:00 a.m.6 views

Denial of Service Vulnerability in Hitman Pro 3.7

Hitman Pro is an anti-spyware virus program. A denial of service vulnerability exists in Hitman Pro 3.7. In the driver for Hitman Pro 3.7, the driver's buffer pointer passed in from the application layer after calling DeviceIoControl is not tested to see if memory space is claimed, resulting in a...

6.9AI score
SaveExploits0
Microsoft Malware Protection
Microsoft Malware Protection
added 2016/10/21 11:22 p.m.50 views

Beware of Hicurdismos: It’s a fake Microsoft Security Essentials installer that can lead to a support call scam

Note: Our Tech support scams FAQ page has the latest info on this type of threat, including scammer tactics, fake error messages, and the latest scammer hotlines. Wouldn’t it be a shame if, in trying to secure your PC, you inadvertently install malware and run the risk of being scammed? We recent...

6.4AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2016/10/17 8:42 a.m.9 views

chromium-browser: url spoofing

Google Chrome prior to 54.0.2840.85 for Android incorrectly handled rapid transition into and out of full screen mode, which allowed a remote attacker to spoof the contents of the Omnibox URL bar via crafted HTML pages...

6.5CVSS7.4AI score0.01235EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2016/10/17 12:00 a.m.20 views

CVE-2016-5187

Google Chrome prior to 54.0.2840.85 for Android incorrectly handled rapid transition into and out of full screen mode, which allowed a remote attacker to spoof the contents of the Omnibox URL bar via crafted HTML pages...

6.5CVSS6.9AI score0.01235EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2016/10/13 8:18 a.m.29 views

CVE-2016-5187

Google Chrome prior to 54.0.2840.85 for Android incorrectly handled rapid transition into and out of full screen mode, which allowed a remote attacker to spoof the contents of the Omnibox URL bar via crafted HTML pages...

8.8CVSS2.4AI score0.01235EPSS
SaveExploits0References2
CNVD
CNVD
added 2016/10/13 12:00 a.m.7 views

NVIDIA Denial of Service Vulnerability

NVIDIA full name NVIDIA Corporation, NASDAQ: NVDA, official Chinese name NVIDIA, founded in January 1993, is a fabless IC semiconductor company focusing on the design of smart-core chipsets. A remote desktop denial of service vulnerability exists in NVIDIA. An attacker could exploit this...

7.8CVSS6.7AI score0.02838EPSS
SaveExploits0References1
Rows per page
Query Builder