227 matches found
CVE-2018-15002
The Vivo V7 device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys allows any app co-located on the device to set system properties as the com.android.phone user. The com.qualcomm.qti.modemtestmode app versionCode=25, versionName=7.1.2 that contains an...
CVE-2018-15001
The Vivo V7 Android device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys contains a platform app with a package name of com.vivo.bsptest versionCode=1, versionName=1.0 containing an exported activity app component named com.vivo.bsptest.BSPTestActivity...
CVE-2018-15001
The Vivo V7 Android device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys contains a platform app with a package name of com.vivo.bsptest versionCode=1, versionName=1.0 containing an exported activity app component named com.vivo.bsptest.BSPTestActivity...
CVE-2018-15001
The Vivo V7 Android device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys contains a platform app with a package name of com.vivo.bsptest versionCode=1, versionName=1.0 containing an exported activity app component named com.vivo.bsptest.BSPTestActivity...
CVE-2018-15001
The CVE-2018-15001 entry concerns the Vivo V7 Android device (build vivo/1718/1718:7.1.2/N2G47H/...) where a platform app with package com.vivo.bsptest (BSPTestActivity, versionCode 1, versionName 1.0) exposes an exported activity that lets any co-located app initiate writing of logcat, Bluetooth...
CVE-2018-15002
Summary: CVE-2018-15002 affects the Vivo V7 on specific build fingerprints. The issue arises because the com.qualcomm.qti.modemtestmode.MbnTestService, exposed by the modemtestmode app, lets any co-located app supply key–value pairs to set system properties as the com.android.phone user. A key de...
CVE-2018-15002
The Vivo V7 device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys allows any app co-located on the device to set system properties as the com.android.phone user. The com.qualcomm.qti.modemtestmode app versionCode=25, versionName=7.1.2 that contains an...
CVE-2018-18776
Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability via the admin/admin.asp ShowAll parameter. NOTE: this is a deprecated product...
Cross site scripting
Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability via the admin/admin.asp ShowAll parameter. NOTE: this is a deprecated product...
CVE-2018-1541
IBM WebSphere Commerce Enterprise V7, V8, and V9 is vulnerable to cross-site scripting, allowing an attacker to embed arbitrary JavaScript in the Web UI and potentially disclose credentials within a trusted session. The vulnerability is tracked as CVE-2018-1541. Metrics indicate a CVSS v3 base sc...
Denial of Service Vulnerability in filar Driver for Fertostat Security V7 Software
Fertostat Security V7 is a powerful antivirus with both anti-Trojan, anti-virus and anti-Rootkit features. A denial of service vulnerability exists in the filar.sys driver in Feltost Security V7, which can be exploited by an attacker to send a 0x80002018 request via the DeviceIoControl function t...
Denial of Service Vulnerability in Filpp Driver for Fertostat Security V7 Software
Fertostat Security V7 is a powerful antivirus with both anti-Trojan, anti-virus and anti-Rootkit features. A denial of service vulnerability exists in the filpp.sys driver in Fertostat Security V7, which can be exploited by an attacker to cause a blue screen on a computer, resulting in a denial o...
Linux/ARM - read(0, buf, 0xff) stager + execve("/bin/sh", NULL, NULL) Shellcode (28 Bytes)
Linux/ARM - read0, buf, 0xff stager + execve"/bin/sh", NULL, NULL Shellcode 28 Bytes. Shellcode exploit for ARM platform / Title: Linux/ARM - read0, buf, 0xff stager + execve"/bin/sh", NULL, NULL Shellcode 28 Bytes Date: 2018-08-30 Tested: armv7l Raspberry Pi 3 Model B+ Author: Ken Kitahara...
Security Bulletin: IBM Communications Server for Windows is affected by multiple vulnerabilities
Summary IBM Communications Server for Windows has addressed the following vulnerabilities: CVE-2018-1388 3RD PARTY GSKit V7 ROBOT Security Advisory CVE-2016-0702 Side channel attack on modular exponentiation CVE-2016-0702 in GSKit CVE-2018-1447 GSKit and GSKit-Crypto Security Advisory December 20...
Security Bulletin: A security vulnerability has been identified in Tivoli Netcool/OMNIbus WebGUI shipped with Tivoli Business Service Manager (CVE-2015-0899)
Summary Tivoli Netcool/OMNIbus WebGUI is shipped as a component of Tivoli Business Service Manager. Information about a security vulnerability affecting Tivoli Netcool/OMNIbus WebGUI has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security...
Security Bulletin: Multiple vulnerabilities in IBM® SDK Java™ Technology Edition affect Data Studio, InfoSphere Data Architect, Optim Query Workload Tuner for Linux, UNIX and Windows, and Optim Query Workload Tuner for z/OS (CVE-2016-0466, CVE-2015-7575)
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is used by IBM Data Studio, InfoSphere Data Architect, Optim Query Workload Tuner for Linux, UNIX and Windows, and Optim Query Workload Tuner for z/OS. These issues were disclosed as part of the IBM Java SDK...
Security Bulletin: A security vulnerability has been identified in IBM Java SDK shipped with IBM DB2 Recovery Expert for Linux, UNIX, and Windows (CVE-2015-4872)
Summary IBM Java SDK is shipped as a component of IBM DB2 Recovery Expert for Linux, UNIX, and Windows . Information about a security vulnerability affecting IBM Java SDK has been published in a security bulletin. Vulnerability Details CVEID: CVE-2015-4872 DESCRIPTION: An unspecified vulnerabilit...
Security Bulletin: A security vulnerability has been identified in WebSphere v6.1 and v7.x shipped with InfoSphere Warehouse v9.5, V9.7, V10.1,and v10.5 (CVE-2014-0114)
Summary WebSphere v6.1 and WebSphere v7.x is shipped as a component of InfoSphere Warehouse v9.5, V9.7, V10.1,and v10.5 . Information about a security vulnerability affecting WebSphere v6.1 and WebSphere v7.x has been published in a security bulletin. Vulnerability Details Please consult the...