296 matches found
CVE-2016-2036
The CVE-2016-2036 entry concerns the getURL function in drivers/secfilter/urlparser.c within the Samsung kernel’s secfilter component for Android on SM-N9005 (Note 3) and SM-G920F (Galaxy S6). The underlying issue is a NULL pointer dereference triggered by a crafted GET HTTP/1.1 request (SVE-2016...
CVE-2016-2565
The connected records corroborate that Samsung SecEmailSync on the Galaxy S6 (Samsung SM-G920F, build G920FXXU2COH2) contains a vulnerability class in the SecEmailSync plugin. CNVD entries describe two concrete issues: (1) CVE-2016-2565/2566 family in SecEmailSync, with an SQL injection vector (S...
CVE-2016-2567
Affected products/component: Samsung Android kernel on SM-N9005 (Note 3) and SM-G920F (Galaxy S6); vulnerable component: secfilter URL filtering plugin. Root cause: input validation vulnerability in secfilter enabling bypass of URL filtering by inserting an "exceptional URL" in the query string. ...
Hughes satellite modems contain multiple vulnerabilities
Overview Several models of Hughes high-performance broadband satellite modems are potentially vulnerable to several issues if not appropriately configured. Description Several models of Hughes high-performance broadband satellite modems are potentially vulnerable to the following issues if not...
Denial of service
An issue was discovered in Siemens ETA4 firmware all versions prior to Revision 08 of the SM-2558 extension module for: SICAM AK, SICAM TM 1703, SICAM BC 1703, and SICAM AK 3. Specially crafted packets sent to Port 2404/TCP could cause the affected device to go into defect mode. A cold start migh...
Google Android - rkp_set_init_page_ro RKP Memory Corruption
Google Android - rkpsetinitpagero RKP Memory Corruption Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=984 As part of Samsung KNOX, Samsung phones include a security hypervisor called RKP Real-time Kernel Protection, running in EL2. This hypervisor is meant to ensure that the...
Android maxdsm Driver Kernel Information Disclosure Vulnerability
Exploit for Android platform in category local exploits Android: Kernel information disclosure in "maxdsmread" The "maxdsm" driver exposes several character devices which can be used to control and calibrate the device. One such device is the "control device", exposed under: "/dev/dsmctrldev". Th...
Cross site scripting
Cross-site scripting XSS vulnerability in Cisco Videoscape Distribution Suite Service Manager VDS-SM 3.0 through 3.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCva14552...
CVE-2016-6418
Cross-site scripting XSS vulnerability in Cisco Videoscape Distribution Suite Service Manager VDS-SM 3.0 through 3.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCva14552...
CVE-2016-6418
CVE-2016-6418 is a cross-site scripting (XSS) vulnerability in Cisco Videoscape Distribution Suite Service Manager (VDS-SM) versions 3.0–3.4.0. The issue arises from insufficient validation of user-supplied input in the web-based management interface, allowing a remote attacker to inject arbitrar...
Cisco Videoscape Distribution Suite Service Manager Reflective Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Videoscape Distribution Suite Service Manager VDS-SM could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...
Siemens SICAM RTU Devices Denial-of-Service Vulnerability
OVERVIEW Stephan Beirer, Markus Mahrla, Toralf Gimpel, and Sebastian Krause, from GAI NetConsult GmbH, and Adam Crain of Automatak LLC have identified a denial-of-service vulnerability in Siemens SICAM products. Siemens has produced a firmware update to mitigate this vulnerability. This...
CVE-2016-1998
HPE Service Manager SM 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...
CVE-2016-1998
CVE-2016-1998 affects HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2. The vulnerability arises from deserializing a crafted Java object, related to the Apache Commons Collections library, allowing remote attackers to execute arbitrary commands. Exposure is via network (remot...
Semantic SM Short URL Script 2.0 SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : http://0day.today 0 1 + Support e-mail :...
CVE-2015-6417
CVE-2015-6417 affects Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.4.0 and earlier. The root cause is failure to consistently enforce RBAC for the back-end database, enabling an authenticated remote user to read and write database entries via the GUI or a crafted HTTP request. T...
CVE-2015-6417
Cisco Videoscape Distribution Suite Service Manager VDS-SM 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to database entries via 1 the GUI or 2 a crafted HTTP request, aka Bug ID CSCuv87025...
Emerson SM-Ethernet FTP Server Default Credentials
Binary data scadaemersonsmethernetftpdefaultcredentials.nbin...