CVE List

Id CVE No. Status Description Phase Votes Comments Actions
102446  CVE-2017-5626  Candidate  OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that allow the attacker to lock/unlock the bootloader, disregarding the "OEM Unlocking" checkbox, without user confirmation and without a factory reset. This allows for persistent code execution with high privileges (kernel/root) with complete access to user data.  Assigned (20170129)  None (candidate not yet proposed)    View
102447  CVE-2017-5627  Candidate  An issue was discovered in Artifex Software, Inc. MuJS before 4006739a28367c708dea19aeb19b8a1a9326ce08. The jsR_setproperty function in jsrun.c lacks a check for a negative array length. This leads to an integer overflow in the js_pushstring function in jsrun.c when parsing a specially crafted JS file.  Assigned (20170129)  None (candidate not yet proposed)    View
102448  CVE-2017-5628  Candidate  An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow when parsing a specially crafted JS file.  Assigned (20170129)  None (candidate not yet proposed)    View
102449  CVE-2017-5629  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170129)  None (candidate not yet proposed)    View
102450  CVE-2017-5630  Candidate  PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite.  Assigned (20170129)  None (candidate not yet proposed)    View

Page 20490 of 20943, showing 5 records out of 104715 total, starting on record 102446, ending on 102450

Actions