VYPR

CVEs

101,988 total · page 1800 of 2,040

AllCriticalHighKEV
  • CVE-2016-8485HigApr 4, 2018
    Qualcomm
    Android kernel
    risk 0.49cvss 7.5epss 0.01

    An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823681.

  • CVE-2016-10235HigApr 4, 2018
    Qualcomm
    WiFi driver
    risk 0.49cvss 7.5epss 0.01

    A denial of service vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android ID: A-34390620. References: QC-CR#1046409.

  • CVE-2016-10232HigApr 4, 2018
    Qualcomm
    video driver
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34386696. References: QC-CR#1024872.

  • CVE-2016-10231HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability in the Qualcomm sound codec driver. Product: Android. Versions: Android kernel. Android ID: A-33966912. References: QC-CR#1096799.

  • CVE-2015-9015HigApr 4, 2018
    Qualcomm
    Android kernel
    risk 0.51cvss 7.8epss 0.00

    An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714120.

  • CVE-2018-6874HigApr 4, 2018
    risk 0.57cvss 8.8epss 0.01

    CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled.

  • CVE-2018-0986HigApr 4, 2018
    Microsoft
    Malware Protection Engine
    risk 0.65cvss 8.8epss 0.63

    A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender,…

  • CVE-2017-13271HigApr 4, 2018
    Google
    Kernel
    risk 0.47cvss 7.3epss 0.00

    A elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-69006799.

  • CVE-2017-13270HigApr 4, 2018
    Google
    Kernel
    risk 0.47cvss 7.3epss 0.00

    A elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-69474744.

  • CVE-2017-13265HigApr 4, 2018
    Google
    Android
    risk 0.47cvss 7.3epss 0.00

    A elevation of privilege vulnerability in the Android system (OTA updates). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-36232423.

  • CVE-2017-13264HigApr 4, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.00

    A other vulnerability in the Android media framework (Avcdec). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70294343.

  • CVE-2017-13263HigApr 4, 2018
    Google
    Android
    risk 0.47cvss 7.3epss 0.00

    A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 8.0, 8.1. Android ID: A-69383160.

  • CVE-2017-13261HigApr 4, 2018
    Google
    Android
    risk 0.52cvss 7.5epss 0.07

    In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product:…

  • CVE-2017-13260HigApr 4, 2018
    Google
    Android
    risk 0.52cvss 7.5epss 0.08

    In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:…

  • CVE-2017-13259HigApr 4, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to missing bounds checks. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product:…

  • CVE-2017-13258HigApr 4, 2018
    Google
    Android
    risk 0.52cvss 7.5epss 0.07

    In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:…

  • CVE-2017-13256HigApr 4, 2018
    Google
    Android
    risk 0.57cvss 8.8epss 0.01

    In process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android.…

  • CVE-2017-13255HigApr 4, 2018
    Google
    Android
    risk 0.57cvss 8.8epss 0.01

    In process_service_attr_req of sdp_server.c, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:…

  • CVE-2017-13254HigApr 4, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.00

    A other vulnerability in the Android media framework (AACExtractor). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70239507.

  • CVE-2017-13253HigApr 4, 2018
    Google
    Android
    risk 0.54cvss 7.8epss 0.03

    In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android.…

  • CVE-2017-13252HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    In CryptoHal::decrypt of CryptoHal.cpp, there is an out of bounds write due to improper input validation that results in a read from uninitialized memory. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed…

  • CVE-2017-13251HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    In impeg2d_dec_pic_data_thread of impeg2d_dec_hdr.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when running multi threaded with no additional execution privileges needed. User interaction is needed for…

  • CVE-2017-13250HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    In ih264d_fmt_conv_420sp_to_420p of ih264d_utils.c, there is an out of bound write due to a missing out of bounds check because of a multiplication error. This could lead to an remote code execution with no additional execution privileges needed. User interaction is needed for…

  • CVE-2017-13249HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    In impeg2d_api_set_display_frame of impeg2d_api_main.c, there is an out of bound write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions:…

  • CVE-2017-13248HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    In impeg2_idct_recon_sse42() of impeg2_idct_recon_sse42_intr.c, there is an out of bound write due to a missing bounds check. This could lead to an remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product:…

  • CVE-2017-13307HigApr 4, 2018
    Google
    Kernel
    risk 0.47cvss 7.3epss 0.00

    A elevation of privilege vulnerability in the Upstream kernel pci sysfs. Product: Android. Versions: Android kernel. Android ID: A-69128924.

  • CVE-2017-13306HigApr 4, 2018
    Google
    Kernel
    risk 0.47cvss 7.3epss 0.00

    A elevation of privilege vulnerability in the Upstream kernel mnh driver. Product: Android. Versions: Android kernel. Android ID: A-70295063.

  • CVE-2017-13305HigApr 4, 2018
    Google
    Android
    risk 0.46cvss 7.1epss 0.00

    A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974.

  • CVE-2017-13302HigApr 4, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.00

    A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-69969749.

  • CVE-2017-13301HigApr 4, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.00

    A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-66498711.

  • CVE-2017-13300HigApr 4, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.00

    A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1. Android ID: A-71567394.

  • CVE-2017-13299HigApr 4, 2018
    Google
    libavc
    risk 0.49cvss 7.5epss 0.00

    A other vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897394.

  • CVE-2017-13293HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In the nfc_hci_cmd_received() function of core.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for…

  • CVE-2017-13291HigApr 4, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible NULL pointer dereference due to missing bounds checks. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product:…

  • CVE-2017-13289HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In writeToParcel and createFromParcel of RttManager.java, there is a permission bypass due to a write size mismatch. This could lead to a local escalation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed.…

  • CVE-2017-13288HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit int mismatch. This could lead to a local escalation of privilege where the user can start an activity with system privileges, with no additional execution…

  • CVE-2017-13287HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In createFromParcel of VerifyCredentialResponse.java, there is a possible invalid parcel read due to improper input validation. This could lead to local escalation of privilege if mPayload in writeToParcel were null, with no additional execution privileges needed. User…

  • CVE-2017-13286HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In writeToParcel and readFromParcel of OutputConfiguration.java, there is a permission bypass due to mismatched serialization. This could lead to a local escalation of privilege where the user can start an activity with system privileges, with no additional execution privileges…

  • CVE-2017-13280HigApr 4, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In the FrameSequence_gif::FrameSequence_gif function of libframesequence, there is a out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.…

  • CVE-2017-13278HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In MediaPlayerService::Client::notify of MediaPlayerService.cpp, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0,…

  • CVE-2017-13277HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    In ihevcd_fmt_conv of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0,…

  • CVE-2017-13276HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    In CProgramConfig_ReadHeightExt of tpdec_asc.cpp, there is a possible stack buffer overflow due to a missing bounds check. This could lead to a remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android.…

  • CVE-2018-9205HigApr 4, 2018
    Drupal
    avatar_uploader
    risk 0.56cvss 7.5epss 0.57

    Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path.

  • CVE-2018-6919HigApr 4, 2018
    FreeBSD
    FreeBSD
    risk 0.49cvss 7.5epss 0.01

    In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, due to insufficient initialization of memory copied to userland, small amounts of kernel memory may be disclosed to userland processes. Unprivileged users may be able to access…

  • CVE-2018-6918HigApr 4, 2018
    FreeBSD
    FreeBSD
    risk 0.49cvss 7.5epss 0.04

    In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option header does not count the size of the option header itself, causing an infinite loop when the length is zero. This issue can allow a remote…

  • CVE-2018-6917HigApr 4, 2018
    FreeBSD
    FreeBSD
    risk 0.49cvss 7.5epss 0.02

    In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, insufficient validation of user-provided font parameters can result in an integer overflow, leading to the use of arbitrary kernel memory as glyph data. Unprivileged users may be…

  • CVE-2017-3971HigApr 4, 2018
    McAfee
    Intrushield Security Management System
    risk 0.53cvss 8.2epss 0.00

    Cryptanalysis vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to view confidential information via insecure use of RC4 encryption cyphers.

  • CVE-2017-3969HigApr 4, 2018
    McAfee
    Intrushield Security Management System
    risk 0.53cvss 8.2epss 0.01

    Abuse of communication channels vulnerability in the server in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows man-in-the-middle attackers to decrypt messages via an inadequate implementation of SSL.

  • CVE-2017-3965HigApr 4, 2018
    McAfee
    Intrushield Security Management System
    risk 0.57cvss 8.8epss 0.01

    Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to perform unauthorized tasks such as retrieving internal system information or manipulating the…

  • CVE-2017-18096HigApr 4, 2018
    Atlassian
    Application Links
    risk 0.47cvss 7.2epss 0.01

    The OAuth status rest resource in Atlassian Application Links before version 5.2.7, from 5.3.0 before 5.3.4 and from 5.4.0 before 5.4.3 allows remote attackers with administrative rights to access the content of internal network resources via a Server Side Request Forgery (SSRF)…