8553 matches found
Android Information Disclosure
The vulnerability of the sound/soc/msm/qdsp6v2/msm-lsm-client.c file of the Qualcomm Android operating system is related to the lack of checks on certain user-space data. Exploiting this vulnerability can allow a malicious actor, acting remotely, to obtain confidential information through a...
Android Privilege Escalation
The vulnerability of the mdss mdp3 driver components of Qualcomm’s Android operating system is related to the lack of data validation for user space. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...
Android Privilege Escalation
The vulnerability in the Linux kernel version up to 3.11 on ARM-based Android platforms is related to improper handling of user space access to the TPIDRURW register. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...
Joyent SmartOS dtrace Information Disclosure Vulnerability
This vulnerability allows attackers to disclose sensitive information on vulnerable installations of Joyent SmartOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the dtrace...
Joyent SmartOS dtrace Information Disclosure Vulnerability
This vulnerability allows attackers to disclose sensitive information on vulnerable installations of Joyent SmartOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the dtrace...
[SECURITY] Fedora 25 Update: glibc-2.24-3.fc25
The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...
Kaspersky Internet Security KLIF Driver NtUserCreateWindowEx_HANDLER Denial of Service
Summary A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF driver. A specially crafted native api call request can cause a access violation exception in KLIF kernel driver resulting in local denial of service. An attacker can ru...
CVE-2016-4657
creationtimestamp| type| source ---|---|--- 2016-08-25 20:59:53+00:00| seen| MISP/57bf5c07-6b40-428e-8f68-4a9a02de0b81 2016-08-26 09:58:54+00:00| seen| MISP/57c0123c-d100-43a8-b874-54a8bce2ab96 2017-03-12 17:11:06+00:00| published-proof-of-concept| https://t.me/alexlitreevchannel/62 2017-03-13...
How disk space /var is allocated for VPX provisioned on SDX
The objective of this article is to explain how the disk space is allocated for VPX provisioned on SDX appliance...
[SECURITY] Fedora 24 Update: glibc-2.23.1-10.fc24
The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...
Joyent SmartOS dtrace Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose information on vulnerable installations of Joyent SmartOS. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists within the dtrace implementation in SmartOS. A functi...
Add From Server < 3.3.2 - Cross-Site Request Forgery (CSRF)
An attacker can use this issue to add illegal content to the victims server, or add very large files to the victim's server to exhaust the amount of available disk space...
CVE-2014-9870
The Linux kernel before 3.11 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly consider user-space access to the TPIDRURW register, which allows local users to gain privileges via a crafted application, aka Android internal bug 28749743 and...
DEBIAN-CVE-2014-9870
The Linux kernel before 3.11 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly consider user-space access to the TPIDRURW register, which allows local users to gain privileges via a crafted application, aka Android internal bug 28749743 and...
UBUNTU-CVE-2014-9897
sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain user-space data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28769856 and Qualcomm internal bu...
CVE-2014-9897
sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain user-space data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28769856 and Qualcomm internal bu...
UBUNTU-CVE-2014-9870
The Linux kernel before 3.11 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly consider user-space access to the TPIDRURW register, which allows local users to gain privileges via a crafted application, aka Android internal bug 28749743 and...
Code injection
The Linux kernel before 3.11 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly consider user-space access to the TPIDRURW register, which allows local users to gain privileges via a crafted application, aka Android internal bug 28749743 and...
Input validation
drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not properly restrict user-space input, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28748271 and Qualcomm internal bug CR550013...
UBUNTU-CVE-2014-9877
drivers/media/platform/msm/camerav2/sensor/actuator/msmactuator.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices mishandles a user-space pointer, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28768281 and...