Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2017-05-16 CVE-2014-9935 Integer Overflow or Wraparound vulnerability in Google Android
In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.
local
low complexity
google CWE-190
7.8
2017-05-16 CVE-2014-9934 Improper Verification of Cryptographic Signature vulnerability in Google Android
A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding.
local
low complexity
google CWE-347
7.8
2017-05-16 CVE-2014-9933 Improper Input Validation vulnerability in Google Android
Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not have access.
local
low complexity
google CWE-20
7.8
2017-05-16 CVE-2014-9932 Integer Overflow or Wraparound vulnerability in Google Android
In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an improper address range computation.
local
low complexity
google CWE-190
7.8
2017-05-16 CVE-2014-9931 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app region size customization due to a hard-coded value.
local
low complexity
google CWE-119
7.8
2017-05-16 CVE-2017-7952 SQL Injection vulnerability in Infor Enterprise Asset Management 11.0Build201410
INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.
network
low complexity
infor CWE-89
8.8
2017-05-15 CVE-2017-8927 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Cgmlarson Vizex Reader 9.7.5
Buffer overflow in Larson VizEx Reader 9.7.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file.
local
low complexity
cgmlarson CWE-119
7.8
2017-05-15 CVE-2017-8926 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Halliburton Logview PRO 10.0.1
Buffer overflow in Halliburton LogView Pro 10.0.1 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file.
local
low complexity
halliburton CWE-119
7.8
2017-05-15 CVE-2017-7478 Improper Input Validation vulnerability in Openvpn
OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet.
network
low complexity
openvpn CWE-20
7.5
2017-05-15 CVE-2016-8741 Information Exposure vulnerability in Apache Qpid Broker-J
The Apache Qpid Broker for Java can be configured to use different so called AuthenticationProviders to handle user authentication.
network
low complexity
apache CWE-200
7.5