CVE Vulnerability Catalog

A vulnerability in Windows Hyper-V allows an attacker to gain elevated privileges on a target guest operating system when Hyper-V instruction emulation fails to properly enforce privilege levels.

A Missing Authorization issue in Rockwell Automation PanelView Plus 6 and 7 allows an attacker remote access to the device without authorization checks.

A Stack-Based Buffer Overflow issue was discovered in Digital Canal Structural Wind Analysis versions 9.1 and prior. An attacker may be able to run arbitrary code by remotely exploiting this vulnerability, leading to a denial-of-service attack.

EMC RSA BSAFE Cert-C before version 2.9.0.5 contains a potential improper certificate processing vulnerability.

Atlassian Bamboo versions 5.x before 5.15.7 and 6.x before 6.0.1 did not correctly check if a user creating a deployment project had the edit permission. An attacker who can log in as a user without these permissions can create a deployment project and execute arbitrary code on an available Bamboo Agent.

An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4, allowing arbitrary Python command execution. An attacker can inject Python code into loaded YAML to trigger this vulnerability.

A remote code execution vulnerability in libxml2 could allow an attacker to execute arbitrary code within the context of an unprivileged process. This issue affects applications using this library on Android.

CVE-2017-0649 is a privilege escalation vulnerability in the MediaTek sound driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Moderate because it first requires compromising a privileged process and due to specific details of the vulnerability that limit its impact.

A vulnerability in the FIQ debugger of the kernel allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High due to the potential for permanent device compromise.

A remote code execution vulnerability in the System UI component allows an attacker to execute arbitrary code within the context of an unprivileged process. This issue affects Android versions 7.1.1 and 7.1.2.

A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.

The CVE-2017-0636 vulnerability in the MediaTek command queue driver allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.

All Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in a WLAN function due to an incorrect message length.

All Android releases from CAF using the Linux kernel have a vulnerability in a kernel driver that involves an off-by-one buffer over-read.

All Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in a camera function.

All Android releases from CAF using the Linux kernel have a buffer overflow vulnerability while loading a firmware image.

All Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in the IPA driver.

All Android releases from CAF using the Linux kernel may be vulnerable to out of bounds access in a camera function.

In a camera driver function in all Android releases from CAF using the Linux kernel, a bounds check is missing when writing into an array potentially leading to an out-of-bounds heap write.

All Android releases from CAF using the Linux kernel contain a double free vulnerability in a display driver.