673 matches found
Google Pixel/Pixel XL HTC touchscreen driver elevation of privilege vulnerability (CNVD-2017-01364)
Google Pixel & Pixel XL are new Android smartphones launched by Google on October 4, 2016, succeeding the previous Nexus series. An elevation of privilege vulnerability exists in the HTC touchscreen driver, which can be exploited by an attacker to cause a native app to execute arbitrary code in t...
Google Pixel/Pixel XL HTC touchscreen driver elevation of privilege vulnerability (CNVD-2017-01342)
Google Pixel & Pixel XL are new Android smartphones launched by Google on October 4, 2016, succeeding the previous Nexus series. An elevation of privilege vulnerability exists in the HTC touchscreen driver, which can be exploited by an attacker to cause a native app to execute arbitrary code in t...
Honeywell XL Web II Controller Privilege Mismanagement Vulnerability
Honeywell XL Web Controller is a web-based SCADA system. A security vulnerability exists in the Honeywell XL Web II Controller. It allows an attacker to open and change certain parameters by accessing a specific URL...
Honeywell XL Web II Controller Session Fixation Vulnerability
Honeywell XL Web Controller is a web-based SCADA system. A session fixation vulnerability exists in Honeywell XL Web II Controller, which can be exploited by an attacker to establish a new user session and steal authenticated sessions...
Honeywell XL Web Multiple Vulnerabilities
Honeywell XL Web is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Google Pixel Binder elevation of privilege vulnerability
Google Pixel C and others are smart devices from Google, U.S.A. Binder is one of the system inter-process communication IPC approach components. An elevation of privilege vulnerability exists in Binder on Google Pixel C, Pixel and Pixel XL devices. An attacker can exploit the vulnerability to...
Google Nexus Qualcomm Media Codecs elevation of privilege vulnerability (CNVD-2016-12169)
Android on Google Pixel XL, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for use on Google Pixel XL smart device, etc. Qualcomm Media Codecs is one of the Qualcomm Qualcomm Media Codecs is one of Qualcomm's multimedia codec components. ...
Google Pixel C NVIDIA libomx Library local elevation of privilege vulnerability (CNVD-2016-12176)
Android on Google Pixel XL, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for Google Pixel XL smart device, etc. The NVIDIA libomx library is one of the NVIDIA libomx library is one of the standard library components for multimedia...
Google Nexus Qualcomm Media Codecs elevation of privilege vulnerability (CNVD-2016-12168)
Android on Google Pixel XL, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for use on Google Pixel XL smart device, etc. Qualcomm Media Codecs is one of the Qualcomm Qualcomm Media Codecs is one of Qualcomm's multimedia codec components. ...
Android Security Bulletin—November 2016Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Alongside the bulletin, we have released a security update to Google devices through an over-the-air OTA update. The Google device firmware images have also been released to the Google Developer...
DEBIAN-CVE-2016-4962
The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service resource consumption or management facility confusion or gain host OS privileges by manipulating information in guest controlled areas of xenstore...
Tabu Oyunu XL - 5000 Kelime - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Tabu Oyunu XL - 5000 Kelime published at the 'play' market has multiple vulnerabilities...
Weather XL PRO - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Weather XL PRO published at the 'play' market has multiple vulnerabilities...
Honeywell XL Web Controller Directory Traversal Vulnerability
OVERVIEW Martin Jartelius of Outpost24 has identified a directory traversal vulnerability in Honeywell’s XL Web Controller. Honeywell has produced an update that mitigates this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The following XLWeb controller versions...
Honeywell Experion PKS Security Vulnerabilities
Update – Unsupported versions of Honeywell distributed control system software are vulnerable to publicly available remote exploits. The Industrial Control System Cyber Emergency Response Team ICS-CERT published on Tuesday an advisory warning organizations to upgrade to supported versions of...
Fedora 21 : xen-4.4.2-7.fc21 (2015-11247)
xl command line config handling stack overflow XSA-137, CVE-2015-3259 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Xen stack buffer overflow vulnerability (CNVD-2015-04947)
Xen is an open source virtual machine monitor product. Xen xl command line configuration handling suffers from a stack buffer overflow vulnerability, which allows attackers to exploit the vulnerability to crash the system and cause a denial of service attack...
DEBIAN-CVE-2015-3259
Stack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows local guest administrators to gain privileges via a long configuration argument...
Stack overflow
Stack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows local guest administrators to gain privileges via a long configuration argument...