6 December 2017

57 results · Feed

• Unscored —
  CVE-2017-17446

  The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Emu library (aka game-music-emu) 0.6.1 do…

  game-music-emu game-music-emu Debian Ubuntu
  Dec 6, 2017
• High 7.5
  CVE-2017-17068

  auth0-js Privilege Escalation Vulnerability

  A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions < 8.12. This vulnerability allows an attacker to acquire authenticated users' tokens and invoke services on a user's behalf if the target site or application use…

  auth0-js npm
  Dec 6, 2017
• Unscored —
  DRUPAL-CONTRIB-2017-091

  The Configuration Update Reports sub-module in the Configuration Update module project enables you to run reports to se…

  drupal/config_update Packagist
  Dec 6, 2017
• Unscored —
  CVE-2017-6262

  NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to a race condit…

  NVIDIA Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-6276

  NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can occur due to an incor…

  NVIDIA Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-6263

  NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to improper usag…

  NVIDIA Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-17440

  GNU Libextractor 1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application cra…

  libextractor libextractor Debian Ubuntu
  Dec 6, 2017
• Unscored —
  CVE-2017-16884 Public exploit

  Cross-site scripting (XSS) vulnerability in MistServer before 2.13 allows remote attackers to inject arbitrary web scri…

  Dec 6, 2017
• Unscored —
  CVE-2017-17055 Public exploit

  Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-sit…

  Dec 6, 2017
• Unscored —
  CVE-2017-17381

  The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error …

  qemu qemu Debian Ubuntu
  Dec 6, 2017
• Unscored —
  CVE-2017-15121

  A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a …

  Red Hat Red Hat Enterprise Linux linux Linux Debian
  Dec 6, 2017
• Unscored —
  CVE-2016-5713

  Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed env…

  Puppet Puppet Agent puppet Debian
  Dec 6, 2017
• Unscored —
  CVE-2017-17439

  In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet cont…

  heimdal heimdal Debian Alpine
  Dec 6, 2017
• Unscored —
  CVE-2017-0874

  A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0,…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-0880

  A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-0877

  A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-0878

  A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 8.0. Androi…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-0873

  A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-0876

  A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-0879

  An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-0837

  An elevation of privilege vulnerability in the Android media framework (libaudiopolicymanager). Product: Android. Versi…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-0871

  An elevation of privilege vulnerability in the Android framework (framework base). Product: Android. Versions: 8.0. And…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-0872

  A remote code execution vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1,…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-0870

  An elevation of privilege vulnerability in the Android framework (libminikin). Product: Android. Versions: 5.1.1, 6.0, …

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-13160

  A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 7.0, 7.1.1, 7.1.2,…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-13162

  An elevation of privilege vulnerability in the kernel binder. Product: Android. Versions: Android kernel. Android ID A-…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-13151

  A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-13164

  An information disclosure vulnerability in the kernel binder driver. Product: Android. Versions: Android kernel. Androi…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-13174

  An elevation of privilege vulnerability in the kernel edl. Product: Android. Versions: Android kernel. Android ID A-631…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-13167

  An elevation of privilege vulnerability in the kernel sound timer. Product: Android. Versions: Android kernel. Android …

  Google Android linux-raspi2 linux-riscv Android Debian Ubuntu
  Dec 6, 2017
• Unscored —
  CVE-2017-13148

  A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-13150

  An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-13153

  An elevation of privilege vulnerability in the Android media framework (libaudioservice). Product: Android. Versions: 8…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-13158

  An information disclosure vulnerability in the Android system (activitymanagerservice). Product: Android. Versions: 5.1…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-13175

  An information disclosure vulnerability in the NVIDIA libwilhelm. Product: Android. Versions: Android kernel. Android I…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-13163

  An elevation of privilege vulnerability in the kernel mtp usb driver. Product: Android. Versions: Android kernel. Andro…

  Google Android Android
  Dec 6, 2017
• Medium 5.3
  CVE-2017-13165

  An elevation of privilege vulnerability in the kernel file system. Product: Android. Versions: Android kernel. Android …

  Google Android linux-raspi2 linux-hwe Android Ubuntu
  Dec 6, 2017
• Unscored —
  CVE-2017-13152

  An information disclosure vulnerability in the Android media framework (libmedia drm). Product: Android. Versions: 5.1.…

  Google Android Android
  Dec 6, 2017
• Unscored —
  CVE-2017-13168

  An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android …

  Google Android linux-raspi2 linux-hwe Android Debian Ubuntu
  Dec 6, 2017
• Unscored —
  CVE-2017-13173

  An elevation of privilege vulnerability in the MediaTek system server. Product: Android. Versions: Android kernel. Andr…

  Google Android Android
  Dec 6, 2017