Archive
12 January 2017
Vulnerabilities first published on this day (UTC), newest first.
159 results · Feed
-
Unscored —
An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to exe…
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious applicat…
-
Unscored —
An elevation of privilege vulnerability in Smart Lock could enable a local malicious user to access Smart Lock settings…
-
Unscored —
An elevation of privilege vulnerability in the libziparchive library could enable a local malicious application to exec…
-
Unscored —
An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to exe…
-
Unscored —
An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access syste…
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute …
-
Unscored —
A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a de…
-
Unscored —
An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enabl…
-
Unscored —
An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application …
-
Unscored —
An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networ…
-
Unscored —
An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networ…
-
Unscored —
An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networ…
-
Unscored —
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to exec…
-
Unscored —
An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access…
-
Unscored —
An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application …
-
Unscored —
A denial of service vulnerability in the NVIDIA camera driver could enable an attacker to cause a local permanent denia…
-
Unscored —
An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networ…
-
Unscored —
An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access…
-
Unscored —
An information disclosure vulnerability in the NVIDIA librm library (libnvrm) could enable a local malicious applicatio…
-
Unscored —
An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networ…
-
Unscored —
An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to acce…
-
Unscored —
An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networ…
-
Unscored —
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to exec…
-
Unscored —
An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access…
-
Unscored —
An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to acce…
-
Unscored —
An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networ…
-
Unscored —
An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application t…
-
High 8.8
LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution vi…
-
Unscored —CVE-2016-9131 EPSS 41%
named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to …
-
Unscored —CVE-2016-9147 EPSS 25%
named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (as…
-
Unscored —CVE-2016-9444 EPSS 18%
named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to …
-
Critical 9.8
CodeIgniter arbitrary code execution
system/libraries/Email.php in CodeIgniter before 3.1.3 allows remote attackers to execute arbitrary code by leveraging control over the email->from field to insert sendmail command-line arguments.
-
Unscored —
Samsung Note devices with KK(4.4), L(5.0/5.1), and M(6.0) software allow attackers to crash the system by creating an a…
-
High 7.2
GeniXCMS SQL injection vulnerability
SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter to gxadmin/index.php.
-
Unscored —
SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated…
-
Unscored —
Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allow attackers to crash systemUI by leveraging incom…
-
Unscored —
SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrat…
-
Unscored —CVE-2016-7479 EPSS 42%
In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized obje…