|
198661
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In all Qualcomm products with Android releases from CAF using the Linux kernel, the length of the MAC address is not checked which may cause out of bounds read.
|
CWE-200
Information Exposure
|
CVE-2017-11001
|
2024-11-21 12:06 |
2017-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198662
|
7.8 |
HIGH
Local
|
google
|
android
|
In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds check may potentially lead to an out-of-bounds write.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-11000
|
2024-11-21 12:06 |
2017-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198663
|
7.8 |
HIGH
Local
|
google
|
android
|
In all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls into ioctl RMNET_IOCTL_ADD_MUX_CHANNEL in ipa wan driver may lead to memory corruption due to missing …
|
CWE-119 NVD-CWE-noinfo
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-10999
|
2024-11-21 12:06 |
2017-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198664
|
7.8 |
HIGH
Local
|
google
|
android
|
In all Qualcomm products with Android releases from CAF using the Linux kernel, in audio_aio_ion_lookup_vaddr, the buffer length, which is user input, ends up being used to validate if the buffer is …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-10998
|
2024-11-21 12:06 |
2017-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198665
|
7.8 |
HIGH
Local
|
google
|
android
|
In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe register can cause corruption of kernel memory.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-10997
|
2024-11-21 12:06 |
2017-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198666
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is possible in c_show(), due to compat_hwcap_str[] not being NULL-terminated. This error is not fa…
|
CWE-200
Information Exposure
|
CVE-2017-10996
|
2024-11-21 12:06 |
2017-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198667
|
8.8 |
HIGH
Network
|
ruby-lang
|
ruby
|
The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log an…
|
CWE-287
Improper Authentication
|
CVE-2017-10784
|
2024-11-21 12:06 |
2017-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198668
|
9.8 |
CRITICAL
Network
|
qnap
|
qts
|
In the medialibrary component in QNAP NAS 4.3.3.0229, an un-authenticated, remote attacker can execute arbitrary system commands as the root user of the NAS application.
|
CWE-20
Improper Input Validation
|
CVE-2017-10700
|
2024-11-21 12:06 |
2017-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198669
|
7.8 |
HIGH
Local
|
daj
|
i-filter_installer
|
Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to execute arbitrary code via a specially crafted executable f…
|
CWE-426
Untrusted Search Path
|
CVE-2017-10860
|
2024-11-21 12:06 |
2017-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198670
|
7.8 |
HIGH
Local
|
daj
|
i-filter_installer
|
Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified di…
|
CWE-426
Untrusted Search Path
|
CVE-2017-10859
|
2024-11-21 12:06 |
2017-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|