Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2016-11-25 CVE-2016-9449 Information Exposure vulnerability in Drupal
The taxonomy module in Drupal 7.x before 7.52 and 8.x before 8.2.3 might allow remote authenticated users to obtain sensitive information about taxonomy terms by leveraging inconsistent naming of access query tags.
network
low complexity
drupal CWE-200
4.3
2016-11-25 CVE-2016-6754 Injection vulnerability in Google Android
A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-05 could enable a remote attacker to execute arbitrary code when the user is navigating to a website.
network
low complexity
google CWE-74
8.8
2016-11-25 CVE-2016-6753 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in kernel components, including the process-grouping subsystem and the networking subsystem, in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2016-11-25 CVE-2016-6752 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2016-11-25 CVE-2016-6751 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2016-11-25 CVE-2016-6750 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2016-11-25 CVE-2016-6749 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2016-11-25 CVE-2016-6748 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2016-11-25 CVE-2016-6747 Improper Access Control vulnerability in Google Android
A denial of service vulnerability in Mediaserver in Android before 2016-11-05 could enable an attacker to use a specially crafted file to cause a device hang or reboot.
local
low complexity
google CWE-284
5.5
2016-11-25 CVE-2016-6746 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5