468 matches found
CVE-2019-10251
The UCWeb UC Browser application through 2019-03-26 for Android uses HTTP to download certain modules associated with PDF and Microsoft Office files related to libpicsel, which allows MITM attacks...
CVE-2019-10250
Summary (CVE-2019-10250) : UCWeb UC Browser 7.0.185.1002 on Windows downloads certain PDF modules over HTTP, enabling man‑in‑the‑middle (MITM) attacks. Root cause: unencrypted HTTP module retrieval. Impact: potential confidentiality exposure via MITM. Exploitation details or active exploit status...
PT-2019-11659
Name of the Vulnerable Software and Affected Versions: UCWeb UC Browser version 7.0.185.1002 Description: The issue allows for man-in-the-middle MITM attacks due to the use of HTTP for downloading certain PDF modules. Recommendations: For version 7.0.185.1002, consider disabling the download of P...
PT-2019-11660
Name of the Vulnerable Software and Affected Versions: UCWeb UC Browser for Android through 2019-03-26 Description: The issue allows for man-in-the-middle MITM attacks due to the use of HTTP for downloading certain modules related to libpicsel, which are associated with PDF and Microsoft Office...
CVE-2019-10251: Cleartext Transmission of Sensitive Information
The UCWeb UC Browser application through 2019-03-26 for Android uses HTTP to download certain modules associated with PDF and Microsoft Office files related to libpicsel, which allows MITM attacks...
CVE-2019-10250: Cleartext Transmission of Sensitive Information
UCWeb UC Browser 7.0.185.1002 on Windows uses HTTP for downloading certain PDF modules, which allows MITM attacks...
Insecure UC Browser 'Feature' Lets Hackers Hijack Android Phones Remotely
Beware! If you are using UC Browser on your smartphones, you should consider uninstalling it immediately. Why? Because the China-made UC Browser contains a "questionable" ability that could be exploited by remote attackers to automatically download and execute code on your Android devices...
Memory corruption
An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...
CVE-2018-20742
An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...
CVE-2018-20742
An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...
CVE-2018-20742
An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...
CVE-2018-20742
An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...
CVE-2018-20742
UC Berkeley RISE Opaque contains a boundary-check flaw: ocall_malloc may return a pointer into enclave memory, enabling an arbitrary enclave memory write. Affected: UC Berkeley RISE Opaque (pre-2018-12-01). Root cause: missing boundary check on ocall_malloc. Impact: potential memory corruption wi...
PT-2019-10197
Name of the Vulnerable Software and Affected Versions: UC Berkeley RISE Opaque versions prior to 2018-12-01 Description: An issue was discovered where there is no boundary check on ocall malloc, which could cause an arbitrary enclave memory write due to the return value being a pointer to enclave...
CVE-2018-20742: Out-of-bounds Write
An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...
VelotiSmart WiFi B-380 Camera - Directory Traversal
VelotiSmart WiFi B-380 Camera - Directory Traversal Title: Vulnerability in VelotiSmart Wifi - Directory Traversal Date: 12-07-2018 Scope: Directory Traversal Platforms: Unix Author: Miguel Mendez Z Vendor: VelotiSmart Version: B380 CVE: CVE-2018–14064 Vulnerability description...
VelotiSmart WiFi B-380 Camera - Directory Traversal
Title: Vulnerability in VelotiSmart Wifi - Directory Traversal Date: 12-07-2018 Scope: Directory Traversal Platforms: Unix Author: Miguel Mendez Z Vendor: VelotiSmart Version: B380 CVE: CVE-2018–14064 Vulnerability description ------------------------- - The vulnerability that affects the device ...
CVE-2018-14064
The uc-http service 1.0.0 on VelotiSmart WiFi B-380 camera devices allows Directory Traversal, as demonstrated by /../../etc/passwd on TCP port 80...