CVE-2018-1295: Deserialization of Untrusted Data

In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one...

PT-2018-11501

Name of the Vulnerable Software and Affected Versions Apache Ignite versions 2.3 and earlier Description The issue arises from the lack of a whitelist for classes allowed for serialization and deserialization in the serialization mechanism. This allows for the execution of arbitrary code when...

HPSBHF03572 rev. 4 - Unsafe Opcodes Exposed in SPI

Potential Security Impact Denial of Service Source: Intel Reported By: Intel VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with how the SPI interface is configured on certain platforms. Specific SPI OpCodes may be left accessible and vulnerable to misuse. In the...

Intel® NUC BIOS Security Updates

Summary: This update mitigates multiple vulnerabilities related to security features in certain Intel® NUC system firmware BIOS. Description: BIOS Administrator and User password bypass: Insufficient protection of password storage in system firmware for NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH,...

spi-integradora.com.br XSS vulnerability

Vulnerable URL: http://www.spi-integradora.com.br/?lang=en!prettyPhoto/1/x,%3Csvg/onload=alert%27openbugbounty%27%3E/x Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19860958 VIP...

GIGABYTE BRIX Mini PCs suffer from a flawed firmware protection mechanism vulnerability

GIGABYTE is a professional motherboard manufacturer in Taiwan, GB-BSi7H-6500 and GB-BXi7-5775 are the BRIX series of mini PCs. UEFI, or Unified Extensible Firmware Interface, is a standard that describes a detailed type of interface. This interface is used to automatically load the operating syst...

spi-reports.com XSS vulnerability

Vulnerable URL: http://www.spi-reports.com/search.php?search=pea+protein%22%3E%3C/title%3E%3C/script%3E%27%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E+ingredients+market Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:...

CVE-2016-3846

The Serial Peripheral Interface driver in Android before 2016-08-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28817378...

CVE-2016-3846

The Serial Peripheral Interface driver in Android before 2016-08-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28817378...

Code injection

The Serial Peripheral Interface driver in Android before 2016-08-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28817378...

CVE-2016-3846

The vulnerability CVE-2016-3846 affects the Serial Peripheral Interface (SPI) driver in Android on Nexus 5X and Nexus 6P (before 2016-08-05). Root cause: an internal bug (28817378) enables a local attacker’s crafted app to escalate privileges within the kernel. Impact: privilege escalation could ...

CVE-2016-3808

The serial peripheral interface driver in Android before 2016-07-05 on Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28430009...

CVE-2016-3808

The serial peripheral interface driver in Android before 2016-07-05 on Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28430009...

CVE-2016-3807

The serial peripheral interface driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28402196...

CVE-2016-3808

The serial peripheral interface driver in Android before 2016-07-05 on Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28430009...

Code injection

The serial peripheral interface driver in Android before 2016-07-05 on Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28430009...

CVE-2016-3807

CVE-2016-3807 describes a privilege-escalation flaw in the serial peripheral interface (SPI) driver on Android devices: specifically affecting Nexus 5X and Nexus 6P, where a crafted application could gain elevated privileges due to a bug in the SPI driver. The issue is categorized as a local elev...

CVE-2016-3807

The serial peripheral interface driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28402196...

CVE-2016-3808

The CVE-2016-3808 issue affects the Android SPI driver on Pixel C devices, where the SPI driver allows a crafted application to escalate privileges. The root cause is an elevation-of-privilege flaw in the serial peripheral interface driver, reported as internal bug 28430009. Public sources descri...

Ubuntu 14.04 LTS : ca-certificates update (USN-2913-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2913-1 advisory. The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 20160104 package,...