deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-13252
Published: 2018-04-04
Description: In CryptoHal::decrypt of CryptoHal.cpp, there is an out of bounds write due to improper input validation that results in a read from uninitialized memory. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-70526702.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103255; https://source.android.com/security/bulletin/2018-03-01; http://www.securityfocus.com/bid/103255
CVE: CVE-2017-13253
Published: 2018-04-04
Description: In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-71389378.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103255; https://source.android.com/security/bulletin/2018-03-01; https://www.exploit-db.com/exploits/44291/
CVE: CVE-2017-13254
Published: 2018-04-04
Description: A other vulnerability in the Android media framework (AACExtractor). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70239507.
CVSS Score: 7.5 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2018-03-01; https://source.android.com/security/bulletin/pixel/2018-03-01
CVE: CVE-2017-13255
Published: 2018-04-04
Description: In process_service_attr_req of sdp_server.c, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68776054.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103253; https://source.android.com/security/bulletin/2018-03-01; http://www.securityfocus.com/bid/103253
CVE: CVE-2017-13256
Published: 2018-04-04
Description: In process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68817966.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103253; https://source.android.com/security/bulletin/2018-03-01; http://www.securityfocus.com/bid/103253
CVE: CVE-2017-13257
Published: 2018-04-04
Description: In bta_pan_data_buf_ind_cback of bta_pan_act.cc there is a use after free that can result in an out of bounds read of memory allocated via malloc. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67110692.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: http://www.securityfocus.com/bid/103253; https://source.android.com/security/bulletin/2018-03-01; http://www.securityfocus.com/bid/103253
CVE: CVE-2017-13258
Published: 2018-04-04
Description: In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67863755.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/103253; https://source.android.com/security/bulletin/2018-03-01; https://www.exploit-db.com/exploits/44326/
CVE: CVE-2017-13259
Published: 2018-04-04
Description: In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to missing bounds checks. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68161546.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/103253; https://source.android.com/security/bulletin/2018-03-01; http://www.securityfocus.com/bid/103253
CVE: CVE-2017-13260
Published: 2018-04-04
Description: In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69177251.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/103253; https://source.android.com/security/bulletin/2018-03-01; https://www.exploit-db.com/exploits/44326/
CVE: CVE-2017-13261
Published: 2018-04-04
Description: In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69177292.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/103253; https://source.android.com/security/bulletin/2018-03-01; https://www.exploit-db.com/exploits/44326/
CVE: CVE-2017-13262
Published: 2018-04-04
Description: In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69271284.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/103253; https://source.android.com/security/bulletin/2018-03-01; https://www.exploit-db.com/exploits/44326/
CVE: CVE-2017-13263
Published: 2018-04-04
Description: A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 8.0, 8.1. Android ID: A-69383160.
CVSS Score: 7.3 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2018-03-01; https://source.android.com/security/bulletin/pixel/2018-03-01
CVE: CVE-2017-13264
Published: 2018-04-04
Description: A other vulnerability in the Android media framework (Avcdec). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70294343.
CVSS Score: 7.5 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2018-03-01; https://source.android.com/security/bulletin/pixel/2018-03-01
CVE: CVE-2017-13265
Published: 2018-04-04
Description: A elevation of privilege vulnerability in the Android system (OTA updates). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-36232423.
CVSS Score: 7.3 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2018-03-01; https://source.android.com/security/bulletin/pixel/2018-03-01
CVE: CVE-2017-13266
Published: 2018-04-04
Description: In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69478941.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/103253; https://source.android.com/security/bulletin/2018-03-01; http://www.securityfocus.com/bid/103253
CVE: CVE-2017-13268
Published: 2018-04-04
Description: A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67058064.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/pixel/2018-03-01; https://source.android.com/security/bulletin/pixel/2018-03-01
CVE: CVE-2017-13269
Published: 2018-04-04
Description: A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68818034.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/pixel/2018-03-01; https://source.android.com/security/bulletin/pixel/2018-03-01
CVE: CVE-2017-13270
Published: 2018-04-04
Description: A elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-69474744.
CVSS Score: 7.3 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2018-03-01; https://source.android.com/security/bulletin/pixel/2018-03-01
CVE: CVE-2017-13271
Published: 2018-04-04
Description: A elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-69006799.
CVSS Score: 7.3 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2018-03-01; https://source.android.com/security/bulletin/pixel/2018-03-01
CVE: CVE-2017-13272
Published: 2018-04-04
Description: In alarm_ready_generic of alarm.cc, there is a possible out of bounds write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67110137.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/103253; https://source.android.com/security/bulletin/2018-03-01; http://www.securityfocus.com/bid/103253
CVE: CVE-2017-18257
Published: 2018-04-04
Description: The __get_data_block function in fs/f2fs/data.c in the Linux kernel before 4.11 allows local users to cause a denial of service (integer overflow and loop) via crafted use of the open and fallocate system calls with an FS_IOC_FIEMAP ioctl.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b86e33075ed1909d8002745b56ecf73b833db143; https://github.com/torvalds/linux/commit/b86e33075ed1909d8002745b56ecf73b833db143; https://usn.ubuntu.com/3696-1/
CVE: CVE-2018-0986
Published: 2018-04-04
Description: A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender, Windows Intune Endpoint Protection, Microsoft Security Essentials, Microsoft System Center Endpoint Protection, Microsoft Exchange Server, Microsoft System Center, Microsoft Forefront Endpoint Protection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103593; http://www.securitytracker.com/id/1040631; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0986
CVE: CVE-2018-6873
Published: 2018-04-04
Description: The Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT audience is not validated.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/103695; https://auth0.com/docs/security/bulletins/cve-2018-6873; http://www.securityfocus.com/bid/103695
CVE: CVE-2018-6874
Published: 2018-04-04
Description: CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/103695; https://auth0.com/docs/security/bulletins/cve-2018-6874; http://www.securityfocus.com/bid/103695
CVE: CVE-2014-9953
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714770.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2014-9954
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36388559.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2014-9955
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384686.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2014-9956
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36389611.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2014-9957
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36387564.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2014-9958
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384774.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2014-9959
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36383694.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9008
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384689.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9009
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393600.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9010
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393101.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9011
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714882.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9012
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384691.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9013
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393251.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9014
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393750.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9015
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714120.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2016-10230
Published: 2018-04-04
Description: A remote code execution vulnerability in the Qualcomm crypto driver. Product: Android. Versions: Android kernel. Android ID: A-34389927. References: QC-CR#1091408.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/97400; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2016-10231
Published: 2018-04-04
Description: An elevation of privilege vulnerability in the Qualcomm sound codec driver. Product: Android. Versions: Android kernel. Android ID: A-33966912. References: QC-CR#1096799.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/97402; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2016-10232
Published: 2018-04-04
Description: An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34386696. References: QC-CR#1024872.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/97339; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2016-10233
Published: 2018-04-04
Description: An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34389926. References: QC-CR#897452.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/97339; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2016-10234
Published: 2018-04-04
Description: An information disclosure vulnerability in the Qualcomm IPA driver. Product: Android. Versions: Android kernel. Android ID: A-34390017. References: QC-CR#1069060.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97365; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2016-10235
Published: 2018-04-04
Description: A denial of service vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android ID: A-34390620. References: QC-CR#1046409.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/97361; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2016-10236
Published: 2018-04-04
Description: An information disclosure vulnerability in the Qualcomm USB driver. Product: Android. Versions: Android kernel. Android ID: A-33280689. References: QC-CR#1102418.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97359; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2016-10298
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393252.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2016-10299
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32577244.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2016-8484
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823575.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/96737; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2016-8485
Published: 2018-04-04
Description: An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823681.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96737; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2016-8486
Published: 2018-04-04
Description: An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823691.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96737; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2016-8487
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823724.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/96737; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2016-8488
Published: 2018-04-04
Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-31625756.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/96737; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-1624
Published: 2018-04-04
Description: IBM QRadar 7.3 and 7.3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 133122.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-732
References: http://www.ibm.com/support/docview.wss?uid=swg22015236; https://exchange.xforce.ibmcloud.com/vulnerabilities/133122; http://www.ibm.com/support/docview.wss?uid=swg22015236
CVE: CVE-2017-1733
Published: 2018-04-04
Description: IBM QRadar 7.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 134914.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-532
References: http://www.ibm.com/support/docview.wss?uid=swg22015243; http://www.securityfocus.com/bid/103736; https://exchange.xforce.ibmcloud.com/vulnerabilities/134914