CVE Vulnerability Catalog

CVE-2017-0762 is a remote code execution vulnerability in the Android media framework (libhevc). It affects Android versions from 5.0.2 to 7.1.2.

CVE-2017-0761 is a remote code execution vulnerability in the Android media framework (libavc). It affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.

CVE-2017-0760 is a remote code execution vulnerability in the Android media framework (libstagefright). It affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2.

CVE-2017-0759 is a remote code execution vulnerability in the Android media framework (libstagefright). It affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2.

CVE-2017-0758 is a remote code execution vulnerability in the Android media framework (libhevc). It affects Android versions from 5.0.2 to 7.1.2.

CVE-2017-0757 is a remote code execution vulnerability in the Android media framework (libavc). It affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2.

CVE-2017-0756 is a remote code execution vulnerability in the Android media framework (libstagefright). It affects Android versions from 4.4.4 to 7.1.2.

CVE-2017-0755 is a privilege escalation vulnerability in the Android libraries (libminikin). It affects Android versions from 5.0.2 to 8.0.

There is a remote code execution vulnerability in the Android libraries (libgdx) in versions 7.1.1, 7.1.2, and 8.0.

CVE-2017-0752 is a privilege escalation vulnerability in the Android framework (windowmanager). It affects Android versions from 4.4.4 to 7.1.2.

The driver_override implementation in the Linux kernel before version 4.12.1 allows local users to gain privileges by leveraging a race condition between a read operation and a store operation involving different overrides.

Integer overflow in the load_multiboot function in QEMU allows local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, triggering an out-of-bounds write.

The mkdumprd script that calls 'dracut' in the current working directory allows local users to trick the administrator into executing code as root.

YaST2 network created files with world readable permissions, which could have allowed local users to read sensitive material from network configuration files, such as passwords for wireless networks.

Vulnerability in Easy Joomla Backup v3.2.4 involves creating a backup copy in the web root with an easily guessable filename.

A vulnerability in the Trust Verification Service (TVS) of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of Transport Layer Security (TLS) traffic by the affected software.

A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device to restart. The issue is due to insufficient rate-limiting protection.

A vulnerability in the HTTP remote procedure call (RPC) service of Cisco set-top box receivers for Yes could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists due to the firmware's failure to handle certain XML values.

A vulnerability in the web-based user interface of Cisco SocialMiner allows an unauthenticated remote attacker to have read and write access to information stored in the system. The issue is due to improper handling of XML External Entity (XXE) entries when parsing an XML file.