Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2017-08-16 CVE-2016-5860 Permissions, Privileges, and Access Controls vulnerability in Google Android
In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a heap buffer overflow.
local
high complexity
google CWE-264
7.0
2017-08-16 CVE-2016-5859 Permissions, Privileges, and Access Controls vulnerability in Google Android
In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a buffer overflow.
local
high complexity
google CWE-264
7.0
2017-08-16 CVE-2016-5853 Permissions, Privileges, and Access Controls vulnerability in Google Android
In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the correct range, an error message is printed, but code execution continues in the same way as for a correct length value.
local
high complexity
google CWE-264
7.0
2017-08-15 CVE-2017-8665 Incorrect Permission Assignment for Critical Resource vulnerability in Microsoft Xamarin.Ios 10.11
The Xamarin.iOS update component on systems running macOS allows an attacker to run arbitrary code as root, aka "Xamarin.iOS Elevation Of Privilege Vulnerability."
local
low complexity
microsoft CWE-732
7.8
2017-08-15 CVE-2017-12864 Integer Overflow or Wraparound vulnerability in multiple products
In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow.
network
low complexity
opencv debian CWE-190
8.8
2017-08-15 CVE-2017-12863 Integer Overflow or Wraparound vulnerability in multiple products
In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_pitch.
network
low complexity
opencv debian CWE-190
8.8
2017-08-15 CVE-2017-12862 Out-of-bounds Write vulnerability in multiple products
In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause copy buffer overflow later.
network
low complexity
opencv debian CWE-787
8.8
2017-08-15 CVE-2017-12852 Infinite Loop vulnerability in Numpy
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation.
network
low complexity
numpy CWE-835
7.5
2017-08-14 CVE-2017-1469 Code Injection vulnerability in IBM Infosphere Information Server 11.3/11.5/9.1
IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories.
local
low complexity
ibm CWE-94
7.8
2017-08-14 CVE-2017-12426 Improper Input Validation vulnerability in Gitlab
GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import.
network
low complexity
gitlab CWE-20
8.8