VYPR

CVEs

406,552 total · page 6111 of 8,132

AllCriticalHighKEV
  • CVE-2014-9953CriApr 4, 2018
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714770.

  • CVE-2018-6874HigApr 4, 2018
    Auth0
    Auth0.js
    risk 0.50cvss 8.8epss 0.01

    CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled.

  • CVE-2018-6873CriApr 4, 2018
    Auth0
    Auth0.js
    risk 0.64cvss 9.8epss 0.02

    The Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT audience is not validated.

  • CVE-2018-0986HigApr 4, 2018
    Microsoft
    Exchange Server
    risk 0.65cvss 8.8epss 0.63

    A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender,…

  • CVE-2017-18257MedApr 4, 2018
    Linux
    Kernel
    risk 0.36cvss 5.5epss 0.00

    The __get_data_block function in fs/f2fs/data.c in the Linux kernel before 4.11 allows local users to cause a denial of service (integer overflow and loop) via crafted use of the open and fallocate system calls with an FS_IOC_FIEMAP ioctl.

  • CVE-2017-13272CriApr 4, 2018
    Google
    Android
    risk 0.64cvss 9.8epss 0.02

    In alarm_ready_generic of alarm.cc, there is a possible out of bounds write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:…

  • CVE-2017-13271HigApr 4, 2018
    Google
    Android
    risk 0.47cvss 7.3epss 0.00

    A elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-69006799.

  • CVE-2017-13270HigApr 4, 2018
    Google
    Android
    risk 0.47cvss 7.3epss 0.00

    A elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-69474744.

  • CVE-2017-13269MedApr 4, 2018
    Google
    Android
    risk 0.28cvss 4.3epss 0.00

    A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68818034.

  • CVE-2017-13268MedApr 4, 2018
    Google
    Android
    risk 0.28cvss 4.3epss 0.00

    A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67058064.

  • CVE-2017-13266CriApr 4, 2018
    Google
    Android
    risk 0.64cvss 9.8epss 0.02

    In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:…

  • CVE-2017-13265HigApr 4, 2018
    Google
    Android
    risk 0.47cvss 7.3epss 0.00

    A elevation of privilege vulnerability in the Android system (OTA updates). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-36232423.

  • CVE-2017-13264HigApr 4, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.00

    A other vulnerability in the Android media framework (Avcdec). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70294343.

  • CVE-2017-13263HigApr 4, 2018
    Google
    Android
    risk 0.47cvss 7.3epss 0.00

    A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 8.0, 8.1. Android ID: A-69383160.

  • CVE-2017-13262MedApr 4, 2018
    Google
    Android
    risk 0.46cvss 6.5epss 0.08

    In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product:…

  • CVE-2017-13261HigApr 4, 2018
    Google
    Android
    risk 0.52cvss 7.5epss 0.07

    In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product:…

  • CVE-2017-13260HigApr 4, 2018
    Google
    Android
    risk 0.52cvss 7.5epss 0.07

    In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:…

  • CVE-2017-13259HigApr 4, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to missing bounds checks. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product:…

  • CVE-2017-13258HigApr 4, 2018
    Google
    Android
    risk 0.52cvss 7.5epss 0.07

    In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:…

  • CVE-2017-13257MedApr 4, 2018
    Google
    Android
    risk 0.42cvss 6.5epss 0.01

    In bta_pan_data_buf_ind_cback of bta_pan_act.cc there is a use after free that can result in an out of bounds read of memory allocated via malloc. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for…

  • CVE-2017-13256HigApr 4, 2018
    Google
    Android
    risk 0.57cvss 8.8epss 0.01

    In process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android.…

  • CVE-2017-13255HigApr 4, 2018
    Google
    Android
    risk 0.57cvss 8.8epss 0.01

    In process_service_attr_req of sdp_server.c, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:…

  • CVE-2017-13254HigApr 4, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.00

    A other vulnerability in the Android media framework (AACExtractor). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70239507.

  • CVE-2017-13253HigApr 4, 2018
    Google
    Android
    risk 0.54cvss 7.8epss 0.03

    In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android.…

  • CVE-2017-13252HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    In CryptoHal::decrypt of CryptoHal.cpp, there is an out of bounds write due to improper input validation that results in a read from uninitialized memory. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed…

  • CVE-2017-13251HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    In impeg2d_dec_pic_data_thread of impeg2d_dec_hdr.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when running multi threaded with no additional execution privileges needed. User interaction is needed for…

  • CVE-2017-13250HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    In ih264d_fmt_conv_420sp_to_420p of ih264d_utils.c, there is an out of bound write due to a missing out of bounds check because of a multiplication error. This could lead to an remote code execution with no additional execution privileges needed. User interaction is needed for…

  • CVE-2017-13249HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    In impeg2d_api_set_display_frame of impeg2d_api_main.c, there is an out of bound write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions:…

  • CVE-2017-13248HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    In impeg2_idct_recon_sse42() of impeg2_idct_recon_sse42_intr.c, there is an out of bound write due to a missing bounds check. This could lead to an remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product:…

  • CVE-2017-13307HigApr 4, 2018
    Google
    Android
    risk 0.47cvss 7.3epss 0.00

    A elevation of privilege vulnerability in the Upstream kernel pci sysfs. Product: Android. Versions: Android kernel. Android ID: A-69128924.

  • CVE-2017-13306HigApr 4, 2018
    Google
    Android
    risk 0.47cvss 7.3epss 0.00

    A elevation of privilege vulnerability in the Upstream kernel mnh driver. Product: Android. Versions: Android kernel. Android ID: A-70295063.

  • CVE-2017-13305HigApr 4, 2018
    Google
    Android
    risk 0.46cvss 7.1epss 0.00

    A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974.

  • CVE-2017-13304MedApr 4, 2018
    Google
    Android
    risk 0.34cvss 5.3epss 0.00

    A information disclosure vulnerability in the Upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-70576999.

  • CVE-2017-13303MedApr 4, 2018
    Google
    Android
    risk 0.34cvss 5.3epss 0.00

    A information disclosure vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-71359108. References: B-V2018010501.

  • CVE-2017-13302HigApr 4, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.00

    A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-69969749.

  • CVE-2017-13301HigApr 4, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.00

    A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-66498711.

  • CVE-2017-13300HigApr 4, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.00

    A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1. Android ID: A-71567394.

  • CVE-2017-13299HigApr 4, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.00

    A other vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897394.

  • CVE-2017-13298MedApr 4, 2018
    Google
    Android
    risk 0.34cvss 5.3epss 0.00

    A information disclosure vulnerability in the Android media framework (libhavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-72117051.

  • CVE-2017-13297MedApr 4, 2018
    Google
    Android
    risk 0.34cvss 5.3epss 0.00

    A information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71766721.

  • CVE-2017-13296MedApr 4, 2018
    Google
    Android
    risk 0.34cvss 5.3epss 0.00

    A information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897454.

  • CVE-2017-13295MedApr 4, 2018
    Google
    Android
    risk 0.34cvss 5.3epss 0.00

    A denial of service vulnerability in the Android framework (package installer). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-62537081.

  • CVE-2017-13294MedApr 4, 2018
    Google
    Android
    risk 0.34cvss 5.3epss 0.00

    A information disclosure vulnerability in the Android framework (aosp email application). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71814449.

  • CVE-2017-13293HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In the nfc_hci_cmd_received() function of core.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for…

  • CVE-2017-13292CriApr 4, 2018
    Google
    Android
    risk 0.64cvss 9.8epss 0.02

    In wl_get_assoc_ies of wl_cfg80211.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:…

  • CVE-2017-13291HigApr 4, 2018
    Google
    Android
    risk 0.49cvss 7.5epss 0.01

    In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible NULL pointer dereference due to missing bounds checks. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product:…

  • CVE-2017-13290MedApr 4, 2018
    Google
    Android
    risk 0.40cvss 6.2epss 0.00

    In sdp_server_handle_client_req of sdp_server.cc, there is an out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android.…

  • CVE-2017-13289HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In writeToParcel and createFromParcel of RttManager.java, there is a permission bypass due to a write size mismatch. This could lead to a local escalation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed.…

  • CVE-2017-13288HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit int mismatch. This could lead to a local escalation of privilege where the user can start an activity with system privileges, with no additional execution…

  • CVE-2017-13287HigApr 4, 2018
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    In createFromParcel of VerifyCredentialResponse.java, there is a possible invalid parcel read due to improper input validation. This could lead to local escalation of privilege if mPayload in writeToParcel were null, with no additional execution privileges needed. User…