Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-7316 State: PUBLISHED Published: 2017-07-04T02:00:00 Last Updated: 2024-08-05T15:56:36.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jun/45
CVE ID: CVE-2017-7317 State: PUBLISHED Published: 2017-07-04T02:00:00 Last Updated: 2024-08-05T15:56:36.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jun/45
CVE ID: CVE-2017-7318 State: PUBLISHED Published: 2017-03-30T07:00:00 Last Updated: 2024-08-05T15:56:36.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97227 - http://blog.iancaling.com/post/155127766533/
CVE ID: CVE-2017-7319 State: REJECTED Published: 2017-04-10T10:56:00 Last Updated: 2017-04-11T11:57:01 Description: No description available.
CVE ID: CVE-2017-7320 State: PUBLISHED Published: 2017-03-30T07:00:00 Last Updated: 2024-08-05T15:56:36.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: setup/controllers/language.php in MODX Revolution 2.5.4-pl and earlier does not properly constrain the language parameter, which allows remote attackers to conduct Cookie-Bombing attacks and cause a denial of service (cookie quota exhaustion), or conduct HTTP Response Splitting attacks with resultant XSS, via an invalid parameter value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97228 - https://mazinahmed.net/services/public-reports/ModX%20-%20Responsible%20Disclosure%20-%
ww.securityfocus.com/bid/97228 - https://mazinahmed.net/services/public-reports/ModX%20-%20Responsible%20Disclosure%20-%20January%202017.pdf
CVE ID: CVE-2017-7321 State: PUBLISHED Published: 2017-03-30T07:00:00 Last Updated: 2024-08-05T15:56:36.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: setup/controllers/welcome.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the config_key parameter to the setup/index.php?action=welcome URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97228 - https://mazinahmed.net/services/public-reports/ModX%20-%20Responsible%20Disclosure%20-%20January%202017.pdf
CVE ID: CVE-2017-7322 State: PUBLISHED Published: 2017-03-30T07:00:00 Last Updated: 2024-08-05T15:56:36.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and trigger the execution of arbitrary code via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97228 - https://mazinahmed.net/services/public-reports/ModX%20-%20Responsible%20Disclosure%20-%20January%202017.pdf
CVE ID: CVE-2017-7323 State: PUBLISHED Published: 2017-03-30T07:00:00 Last Updated: 2024-08-05T15:56:36.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier use http://rest.modx.com by default, which allows man-in-the-middle attackers to spoof servers and trigger the execution of arbitrary code by leveraging the lack of the HTTPS protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97228 - https://mazinahmed.net/services/public-reports/ModX%20-%20Responsible%20Disclosure%20-%20January%202017.pdf
CVE ID: CVE-2017-7324 State: PUBLISHED Published: 2017-03-30T07:00:00 Last Updated: 2024-08-05T15:56:36.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: setup/templates/findcore.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the core_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97228 - https://mazinahmed.net/services/public-reports/ModX%20-%20Responsible%20Disclosure%20-%20January%202017.pdf
CVE ID: CVE-2017-7325 State: PUBLISHED Published: 2018-01-19T17:00:00Z Last Updated: 2024-09-16T22:36:01.365Z Vendors: Yandex N.V. Products: Yandex Browser Problem Types: Address bar spoofing Description: Yandex Browser before 16.9.0 allows remote attackers to spoof the address bar via window.open. Additional Analyst Notes: - CVE Program Container: References: - https://browser.yandex.com/security/changelogs/fixed-in-version-16-9
CVE ID: CVE-2017-7326 State: PUBLISHED Published: 2018-01-19T17:00:00Z Last Updated: 2024-09-17T03:37:27.670Z Vendors: Yandex N.V. Products: Yandex Browser for Android Problem Types: Memory corruption Description: Race condition issue in Yandex Browser for Android before 17.4.0.16 allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page Additional Analyst Notes: - CVE Program Container: References: - https://browser.yandex.com/security/changelogs/fixed-in-version-17-4
CVE ID: CVE-2017-7327 State: PUBLISHED Published: 2018-01-19T17:00:00Z Last Updated: 2024-09-16T21:57:43.175Z Vendors: Yandex N.V. Products: Yandex Browser for Desktop Problem Types: Dll hijacking Description: Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll. Additional Analyst Notes: - CVE Program Container: References: - https://browser.yandex.com/security/changelogs/fixed-in-version-17-4
CVE ID: CVE-2017-7335 State: PUBLISHED Published: 2017-10-26T13:00:00 Last Updated: 2024-10-25T14:11:35.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC 6.1-x (6.1-2, 6.1-4 and 6.1-5); 7.0-x (7.0-7, 7.0-8, 7.0-9, 7.0-10); and 8.x (8.0, 8.1, 8.2 and 8.3.0-8.3.2) allows an authenticated user to inject arbitrary web script or HTML via non-sanitized parameters "refresh" and "branchtotable" present in HTTP POST requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/101287 - https://fortiguard.com/psirt/FG-IR-17-106
CVE ID: CVE-2017-7336 State: PUBLISHED Published: 2017-07-22T21:00:00Z Last Updated: 2024-10-25T14:33:53.919Z Vendors: Fortinet, Inc. Products: Fortinet FortiWLM Problem Types: Hard-coded credentials Description: A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands with 'upgrade' account privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/99351 - https://fortiguard.com/advisory/FG-IR-17-115
CVE ID: CVE-2017-7337 State: PUBLISHED Published: 2017-05-26T22:00:00 Last Updated: 2024-10-25T14:34:44.413Z Vendors: Fortinet, Inc. Products: Fortinet FortiPortal Problem Types: Improper Access Control Description: An improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to interact with unauthorized VDOMs or enumerate other ADOMs via another user's stolen session and CSRF tokens or the adomName parameter in the /fpc/sec/customer/policy/getAdomVersion request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-17-114
CVE ID: CVE-2017-7338 State: PUBLISHED Published: 2017-05-26T22:00:00 Last Updated: 2024-10-25T14:34:32.389Z Vendors: Fortinet, Inc. Products: Fortinet FortiPortal Problem Types: Information disclosure Description: A password management vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to carry out information disclosure via the FortiAnalyzer Management View. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-17-114
CVE ID: CVE-2017-7339 State: PUBLISHED Published: 2017-05-26T22:00:00 Last Updated: 2024-10-25T14:13:38.427Z Vendors: Fortinet, Inc. Products: Fortinet FortiPortal Problem Types: Execution of unauthorized code or commands Description: A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the 'Name' and 'Description' inputs in the 'Add Revision Backup' functionality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-17-114
CVE ID: CVE-2017-7340 State: PUBLISHED Published: 2019-03-25T20:55:59 Last Updated: 2024-10-25T14:07:36.332Z Vendors: Fortinet Products: Fortinet FortiPortal Problem Types: Cross-Site Scripting Description: A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the applicationSearch parameter in the FortiView functionality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-17-114
CVE ID: CVE-2017-7341 State: PUBLISHED Published: 2017-10-26T13:00:00 Last Updated: 2024-10-25T14:33:30.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0-10, 8.0 through 8.2, and 8.3.0 through 8.3.2 file management AP script download webUI page allows an authenticated admin user to execute arbitrary system console commands via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-17-119 - http://www.securityfocus.com/bid/101273
CVE ID: CVE-2017-7342 State: PUBLISHED Published: 2019-03-25T21:05:27 Last Updated: 2024-10-25T14:31:01.162Z Vendors: Fortinet, Inc. Products: Fortinet FortiPortal Problem Types: Password Description: A weak password recovery process vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via a hidden Close button Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-17-114
CVE ID: CVE-2017-7343 State: PUBLISHED Published: 2017-05-26T22:00:00 Last Updated: 2024-10-25T14:13:26.293Z Vendors: Fortinet, Inc. Products: Fortinet FortiPortal Problem Types: Execution of unauthorized code or commands Description: An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or commands via the url parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-17-114
CVE ID: CVE-2017-7344 State: PUBLISHED Published: 2017-12-14T18:00:00Z Last Updated: 2024-10-25T14:32:58.833Z Vendors: Fortinet, Inc. Products: FortiClientWindows Problem Types: Escalation of privilege Description: A privilege escalation in Fortinet FortiClient Windows 5.4.3 and earlier as well as 5.6.0 allows attacker to gain privilege via exploiting the Windows "security alert" dialog thereby popping up when the "VPN before logon" feature is enabled and an untrusted certificate chain. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://securite.intrinsec.com/2017/12/22/cve-2017-7344-fortinet-forticlient-windows-privilege-escalation-at-logon/ -
- https://securite.intrinsec.com/2017/12/22/cve-2017-7344-fortinet-forticlient-windows-privilege-escalation-at-logon/ - http://www.securityfocus.com/bid/102176 - https://fortiguard.com/advisory/FG-IR-17-070
CVE ID: CVE-2017-7345 State: PUBLISHED Published: 2017-04-10T15:00:00 Last Updated: 2024-08-05T15:56:36.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP before 7.1P1 improperly bind the Java Management Extension Remote Method Invocation (aka JMX RMI) service to the network, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/NTAP-20170331-0002 - http://www.securityfocus.com/bid/97537
CVE ID: CVE-2017-7346 State: PUBLISHED Published: 2017-03-30T23:00:00 Last Updated: 2024-08-05T15:56:36.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vmw_gb_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.7 does not validate certain levels data, which allows local users to cause a denial of service (system hang) via a crafted ioctl call for a /dev/dri/renderD* device. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3927 - https://lists.freedesktop.org/archives/dri-devel/2017-March/137429.html - http://marc.info/?l=linux-kernel&m=149086968410117&w=2 - https:
edesktop.org/archives/dri-devel/2017-March/137429.html - http://marc.info/?l=linux-kernel&m=149086968410117&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=1437431 - http://www.debian.org/security/2017/dsa-3945 - http://www.securityfocus.com/bid/97257
CVE ID: CVE-2017-7351 State: PUBLISHED Published: 2018-02-08T15:00:00 Last Updated: 2024-08-05T15:56:36.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection issue exists in a file upload handler in REDCap 7.x before 7.0.11 via a trailing substring to SendITController:upload. Additional Analyst Notes: - CVE Program Container: References: - https://labs.nettitude.com/blog/cve-2017-7351-redcap-7-0-0-7-0-10-sql-injection/
CVE ID: CVE-2017-7352 State: PUBLISHED Published: 2017-10-11T06:00:00 Last Updated: 2024-08-05T15:56:36.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbitrary web script or HTML via the "host" parameter on the 'System > Configuration > SNMP > Add SNMP Trap Manager' screen. Additional Analyst Notes: - CVE Program Container: References: - http://arthrocyber.com/research#finding_3
CVE ID: CVE-2017-7357 State: PUBLISHED Published: 2017-04-14T18:00:00 Last Updated: 2024-08-05T15:56:36.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by importing a file. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/HCPUB-2903 - http://www.securityfocus.com/archive/1/540410/100/0/threaded - http://www.securityfocus.com/bid/97621 - https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-04-12-887732597.html
CVE ID: CVE-2017-7358 State: PUBLISHED Published: 2017-04-05T06:23:00 Last Updated: 2024-08-05T15:56:36.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path locations and escalate privileges to root when the guest user logs out. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1677924 - https://lists.freedesktop.org/archives/lightdm/2017-April/001059.html - http://bazaar.launchpad.net/~lightdm-team/lightdm/trunk/revision/2478 - https://www.exploit-db.com/exploits/41923/ - https://www.ubuntu.com/usn/usn-3
lightdm-team/lightdm/trunk/revision/2478 - https://www.exploit-db.com/exploits/41923/ - https://www.ubuntu.com/usn/usn-3255-1/ - http://www.securityfocus.com/bid/97486
CVE ID: CVE-2017-7359 State: PUBLISHED Published: 2017-03-31T04:26:00 Last Updated: 2024-08-05T15:56:36.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97270 - http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html - http://www.securityfocus.com/bid/97274
CVE ID: CVE-2017-7360 State: PUBLISHED Published: 2017-03-31T04:26:00 Last Updated: 2024-08-05T15:56:36.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack. Additional Analyst Notes: - CVE Program Container: References: - http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html - http://www.securityfocus.com/bid/97264
CVE ID: CVE-2017-7361 State: PUBLISHED Published: 2017-03-31T04:26:00 Last Updated: 2024-08-05T15:56:36.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack. Additional Analyst Notes: - CVE Program Container: References: - http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html - http://www.securityfocus.com/bid/97274
CVE ID: CVE-2017-7362 State: PUBLISHED Published: 2017-03-31T04:26:00 Last Updated: 2024-08-05T15:56:36.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97268 - http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html
CVE ID: CVE-2017-7363 State: PUBLISHED Published: 2017-03-31T04:26:00 Last Updated: 2024-08-05T15:56:36.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack. Additional Analyst Notes: - CVE Program Container: References: - http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html - http://www.securityfocus.com/bid/97259
CVE ID: CVE-2017-7364 State: PUBLISHED Published: 2017-08-18T19:00:00Z Last Updated: 2024-09-17T04:09:26.293Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Use After Free in Video Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a user-provided address (which could point to arbitrary kernel address), so on an error condition, this user-provided address will be freed (arbitrary free), and continued operation could result in use after free condition. Additional Analyst Notes: - CVE Program Container: References: - https://source.android
ult in use after free condition. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2017-7365 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-05T15:56:36.526Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: String Errors in Linux Boot Description: In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2017-7366 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-05T15:56:36.490Z Vendors: n/a Products: n/a Problem Types: Improper Input Validation in Graphics Description: In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2017-7367 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-05T15:56:36.455Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Integer Underflow Vulnerability in Linux Boot Description: In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2017-7368 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-05T15:56:36.457Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Time-of-check Time-of-use (TOCTOU) Race Condition in Audio Description: In all Android releases from CAF using the Linux kernel, a race condition potentially exists in the ioctl handler of a sound driver. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2017-7369 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-05T15:56:36.504Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Validation of Array Index in ALSA Description: In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading to kernel stack corruption. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2017-7370 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-05T15:56:36.417Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Time-of-check Time-of-use (TOCTOU) Race Condition in Video Description: In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free condition. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2017-7371 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-05T15:56:36.483Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Use After Free Vulnerability in Bluetooth Description: In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed when SLIMbus is turned off by Bluetooth. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2017-7372 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-05T15:56:36.471Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Time-of-check Time-of-use (TOCTOU) Race Condition in Video Description: In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow or write to arbitrary pointer location. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2017-7373 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-05T15:56:36.466Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Double Free Vulnerability in Display Description: In all Android releases from CAF using the Linux kernel, a double free vulnerability exists in a display driver. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securitytracker.com/id/1038623