1332 matches found
Google Android Media framework (libhevc) Denial of Service Vulnerability
Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with the Media framework libhevc as a decoding library for multimedia development. libhevc is one of the hevc decoding...
MetInfo cross-site scripting vulnerability (CNVD-2018-08418)
MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A cross-site scripting vulnerability exists in the front page of MetInfo version 6.0. A remote attacker can exploit this vulnerability by sending a feedback message to an administrat...
MetInfo Cross-Site Scripting Vulnerability (CNVD-2018-08331)
MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A cross-site scripting vulnerability exists in the save.php file in MetInfo version 6.0. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML...
Samsung mobile device sensorhub binder service buffer error vulnerability
Samsung mobile devices are smart mobile devices released by Samsung in South Korea. android M and N are different versions of the Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA. sensorhub is a sensor and binder service. The binder service is one of...
Samsung Mobile Device Email Application Cross-Site Scripting Vulnerability
Samsung mobile devices are smart mobile devices released by Samsung in South Korea.Android M is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Email application is one of the email applications. Email application is one of the email...
CVE-2017-1762
IBM Jazz Foundation IBM Rational Collaborative Lifecycle Management 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...
CactusVPN root elevation of privilege vulnerability
CactusVPN for macOS is a macOS-based VPN software from CactusVPN Moldova for anonymous access to the Internet. privileged helper tool is one of the helper tools. A privileged helper tool vulnerability exists in CactusVPN 6.0 and earlier versions for macOS-based platforms. An attacker can exploit...
Adobe Experience Manager Reflective Cross-Site Scripting Vulnerability
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
CVE-2017-13243
A information disclosure vulnerability in the Android system ui. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. ID: A-38258991...
Trend Micro Control Manager SQL Injection Remote Code Execution Vulnerability (CNVD-2018-03779)
Trend Micro Control Manager provides forward-looking, comprehensive threat protection with centralized management for security updates, patch deployment, coordinated response, and remote management capabilities that support Trend Micro products and services. A TopXXX, ViolationXXX, and IncidentXX...
Trend Micro Control Manager SQL Injection Remote Code Execution Vulnerability
Trend Micro Control Manager provides forward-looking, comprehensive threat protection with centralized management for security updates, patch deployment, coordinated response, and remote management capabilities that support Trend Micro products and services. An AdHocQueryProcessor SQL Injection...
Atlassian FishEye and Crucible Cross-Site Scripting Vulnerabilities (CNVD-2018-05475)
Atlassian FishEye and Crucible are both products of the Australian company Atlassian, FishEye is a suite of software for deep viewing of source code repositories and Crucible is a suite of code review tools. A cross-site scripting vulnerability exists in source browse resource in Atlassian FishEy...
IBM Connections Engagement Center Information Disclosure Vulnerability
IBM Connections Engagement Center is a set of digital work platforms for employees at IBM in the United States. The platform allows for the addition of email, apps, news, and social tools through an administrative interface. An information disclosure vulnerability exists in IBM Connections...
IBM Connections Engagement Center Cross-Site Scripting Vulnerability
IBM Connections Engagement Center is a set of digital work platforms for employees at IBM in the United States. The platform allows for the addition of email, apps, news, and social tools through an administrative interface. A cross-site scripting vulnerability exists in IBM Connections Engagemen...
CVE-2017-13159
An information disclosure vulnerability in the Android system activitymanagerservice. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-32879772...
CVE-2017-0877
A remote code execution vulnerability in the Android media framework libavc. Product: Android. Versions: 6.0. Android ID A-66372937...
CVE-2017-0874
A denial of service vulnerability in the Android media framework libavc. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63315932...
CVE-2017-13154
An elevation of privilege vulnerability in the Android media framework libstagefright. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63666573...
Google Android Media framework (libavc) remote code execution vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. media framework libavc is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in Media framework libavc in Android version 6.0. A...