CVE & Exploit Intelligence Database

CVE-2016-3925 5.5 MEDIUM EPSS 0.00

server/wifi/anqp/ANQPFactory.java in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows attackers to cause a denial of service (blocked Wi-Fi usage) via a crafted application, aka internal bug 30230534.

CWE-284 Oct 10, 2016

CVE-2016-3924 5.5 MEDIUM EPSS 0.00

services/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not validate EFFECT_CMD_SET_PARAM and EFFECT_CMD_SET_PARAM_DEFERRED commands, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 30204301.

CWE-200 Oct 10, 2016

CVE-2016-3923 5.5 MEDIUM EPSS 0.00

The Accessibility services in Android 7.0 before 2016-10-01 mishandle motion events, which allows attackers to conduct touchjacking attacks and consequently gain privileges via a crafted application, aka internal bug 30647115.

CWE-284 Oct 10, 2016

CVE-2016-3920 5.5 MEDIUM EPSS 0.00

id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service (device hang or reboot) via a crafted file, aka internal bug 30744884.

CWE-20 Oct 10, 2016

CVE-2016-3918 5.5 MEDIUM EPSS 0.00

email/provider/AttachmentProvider.java in AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not ensure that certain values are integers, which allows attackers to read arbitrary attachments via a crafted application that provides a pathname value, aka internal bug 30745403.

CWE-200 Oct 10, 2016

CVE-2016-3908 5.5 MEDIUM EPSS 0.00

The Lock Settings Service in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows attackers to remove a device's PIN or password, and consequently gain privileges, via a crafted application, aka internal bug 30003944.

CWE-264 Oct 10, 2016

CVE-2016-3902 5.5 MEDIUM 1 PoC Analysis EPSS 0.00

drivers/platform/msm/ipa/ipa_qmi_service.c in the Qualcomm IPA driver in Android before 2016-10-05 on Nexus 5X and 6P devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29953313 and Qualcomm internal bug CR 1044072.

CWE-200 Oct 10, 2016

CVE-2016-3882 6.5 MEDIUM EPSS 0.00

Off-by-one error in server/wifi/anqp/VenueNameElement.java in Wi-Fi in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service (reboot) via an access point that provides a crafted (1) Venue Group or (2) Venue Type value, aka internal bug 29464811.

CWE-284 Oct 10, 2016

CVE-2016-3860 5.5 MEDIUM EPSS 0.00

sound/soc/msm/qdsp6v2/audio_calibration.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29323142 and Qualcomm internal bug CR 1038127.

CWE-200 Oct 10, 2016

CVE-2015-8956 6.1 MEDIUM EPSS 0.00

The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket.

CWE-476 Oct 10, 2016

CVE-2015-8950 5.5 MEDIUM EPSS 0.00

arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dma_mmap call.

CWE-200 Oct 10, 2016

CVE-2016-1000007 6.1 MEDIUM EPSS 0.00

Pagure 2.2.1 XSS in raw file endpoint

CWE-79 Oct 07, 2016

CVE-2016-7777 6.3 MEDIUM EPSS 0.00

Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest by modifying an instruction while the hypervisor is preparing to emulate it.

CWE-362 Oct 07, 2016

CVE-2016-7424 5.5 MEDIUM EPSS 0.00

The put_no_rnd_pixels8_xy2_mmx function in x86/rnd_template.c in libav 11.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted MP3 file.

CWE-476 Oct 07, 2016

CVE-2015-7363 5.4 MEDIUM EPSS 0.00

Cross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.3, in hardware models with a hard disk, and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.3 allows remote administrators to inject arbitrary web script or HTML via vectors related to report filters.

CWE-79 Oct 07, 2016

CVE-2016-1000114 6.1 MEDIUM EPSS 0.00

XSS in huge IT gallery v1.1.5 for Joomla

CWE-79 Oct 06, 2016

CVE-2015-1000008 5.3 MEDIUM EPSS 0.06

Path Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.2

CWE-200 Oct 06, 2016

CVE-2015-1000004 6.1 MEDIUM EPSS 0.01

XSS in filedownload v1.4 wordpress plugin

CWE-79 Oct 06, 2016

CVE-2016-6436 6.1 MEDIUM EPSS 0.00

Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz14682.

CWE-79 Oct 06, 2016

CVE-2016-6435 6.5 MEDIUM 2 PoCs Analysis EPSS 0.55

The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30376.

CWE-200 Oct 06, 2016