|
247431
|
7.8 |
HIGH
Local
|
google
|
android
|
NVIDIA libnvomx contains a possible out of bounds write due to a improper input validation which could lead to local escalation of privilege. This issue is rated as high. Product: Android. Version: N…
|
CWE-20 CWE-787
Improper Input Validation Out-of-bounds Write
|
CVE-2017-6281
|
2024-11-21 12:29 |
2018-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247432
|
6.7 |
MEDIUM
Local
|
f5
|
big-iq_centralized_management
|
A local user on F5 BIG-IQ Centralized Management 5.1.0-5.2.0 with the Access Manager role has privileges to change the passwords of other users on the system, including the local admin account passwo…
|
CWE-269
Improper Privilege Management
|
CVE-2017-6152
|
2024-11-21 12:29 |
2018-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247433
|
7.0 |
HIGH
Local
|
nvidia google
|
shield_tv_firmware android
|
NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or possible escalation of privileges. This issue is rated as moderate.
|
CWE-362
Race Condition
|
CVE-2017-6296
|
2024-11-21 12:29 |
2018-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247434
|
8.4 |
HIGH
Local
|
nvidia google
|
shield_tv_firmware android
|
NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial …
|
CWE-125
Out-of-bounds Read
|
CVE-2017-6295
|
2024-11-21 12:29 |
2018-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247435
|
5.5 |
MEDIUM
Local
|
nvidia google
|
shield_tv_firmware android
|
NVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG) where the DRBG does not properly initialize and store or transmits sensitive data using a weakened enc…
|
CWE-200 CWE-326
Information Exposure Inadequate Encryption Strength
|
CVE-2017-6284
|
2024-11-21 12:29 |
2018-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247436
|
5.5 |
MEDIUM
Local
|
nvidia google
|
shield_tv_firmware android
|
NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure. This issue is r…
|
CWE-200
Information Exposure
|
CVE-2017-6283
|
2024-11-21 12:29 |
2018-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247437
|
7.8 |
HIGH
Local
|
nvidia google
|
shield_tv_firmware android
|
NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary location which may lead to an escalation of privileges. This…
|
CWE-123
Write-what-where Condition
|
CVE-2017-6282
|
2024-11-21 12:29 |
2018-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247438
|
7.5 |
HIGH
Network
|
google
|
android
|
NVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to information disclosure. This issue is rated as moderate. Android: A-63851980.
|
CWE-200 CWE-125
Information Exposure Out-of-bounds Read
|
CVE-2017-6280
|
2024-11-21 12:29 |
2018-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247439
|
7.5 |
HIGH
Network
|
f5
|
big-ip_application_security_manager
|
On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed types of data on systems…
|
CWE-20
Improper Input Validation
|
CVE-2017-6154
|
2024-11-21 12:29 |
2018-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247440
|
7.5 |
HIGH
Network
|
f5
|
big-ip_local_traffic_manager big-ip_application_acceleration_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…
|
Under certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble IP Fragments option is disabled (default), some specific large fragmented packet…
|
CWE-20
Improper Input Validation
|
CVE-2017-6150
|
2024-11-21 12:29 |
2018-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|