CVE-2011-1350

The CVE-2011-1350 entry describes an information-disclosure vulnerability in the PowerVR SGX driver used by Android prior to 2.3.6. The flaw allows an attacker to leak potentially sensitive data from kernel stack memory via a crafted request to the pvrsrvkm device. Affected component: PowerVR SGX...

CVE-2011-1352

The CVE-2011-1352 issue affects the PowerVR SGX driver used in Android prior to 2.3.6. A local attacker can trigger kernel memory corruption via the pvrsrvkm device by supplying crafted user data, enabling privilege escalation to root. Multiple connected sources (including Levitator exploit code,...

CVE-2011-1350

The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an application that uses a crafted length parameter in a request to the pvrsrvkm device...

CVE-2011-1352

The PowerVR SGX driver in Android before 2.3.6 allows attackers to gain root privileges via an application that triggers kernel memory corruption using crafted user data to the pvrsrvkm device...

Google Android 2.3.5 - PowerVR SGX Driver Information Disclosure

Google Android 2.3.5 - PowerVR SGX Driver Information Disclosure // source: https://www.securityfocus.com/bid/57900/info The PowerVR SGX driver in Android is prone to an information-disclosure vulnerability. Successful exploits allows an attacker to gain access to sensitive information. Informati...

Google Android 2.3.5 - PowerVR SGX Driver Information Disclosure

// source: https://www.securityfocus.com/bid/57900/info The PowerVR SGX driver in Android is prone to an information-disclosure vulnerability. Successful exploits allows an attacker to gain access to sensitive information. Information obtained may aid in further attacks. Android 2.3.5 and prior...

CVE-2011-1349: Android PowerVR SGX driver denial of service

CVE-2011-1349: Android PowerVR SGX driver denial of service due to a NULL pointer dereference in PVRSRV_BRIDGE_CREATE_DEVMEMCONTEXT handler, allowing a local attacker to cause a kernel panic. Affected component: PowerVR SGX graphics driver on Android. Exploitation details are not provided in the ...

SGX-SP Final 'shop.cgi' Multiple Cross Site Scripting Vulnerabilities

SGX-SP Final is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SGX-SP Final and SGX-SP Final NE vulnerable to cross-site scripting

Overview SGX-SP Final and SGX-SP Final NE are vulnerable to cross-site scripting. SGX-SP Final and SGX-SP Final NE are shopping cart software. SGX-SP Final and SGX-SP Final NE are vulnerable to cross-site scripting. Yoshinori Ohta of Business Architects Inc. reported this vulnerability to IPA...

CVE-2010-3926

Multiple cross-site scripting XSS vulnerabilities in Shop.cgi in SGX-SP Final before 11.00 and SGX-SP Final NE before 11.00 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Shop.cgi in SGX-SP Final before 11.00 and SGX-SP Final NE before 11.00 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3926

Multiple cross-site scripting XSS vulnerabilities in Shop.cgi in SGX-SP Final before 11.00 and SGX-SP Final NE before 11.00 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3926

SGX-SP Final and SGX-SP Final NE are vulnerable to cross-site scripting (XSS) in Shop.cgi before version 11.00. The issue affects SGX-SP Final Ver.10.00 and earlier and SGX-SP Final NE Ver.10.00 and earlier; it has been fixed in SGX-SP Final Ver.11.00 and SGX-SP Final NE Ver.11.00. The vulnerabil...

JVN#86347943: SGX-SP Final and SGX-SP Final NE vulnerable to cross-site scripting

SGX-SP Final and SGX-SP Final NE are shopping cart software. SGX-SP Final and SGX-SP Final NE are vulnerable to cross-site scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provid...