# CVEs published 2017-01-12 159 CVEs were published on January 12, 2017: 0 critical, 1 high. Days are UTC. - [CVE-2015-6501](https://cve.now/CVE-2015-6501.md): Open redirect vulnerability in the Console in Puppet Enterprise before 2015.2.1 allows remote attackers to redirect users to arbitrary web s (no CVSS) - [CVE-2016-10027](https://cve.now/CVE-2016-10027.md): Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle (no CVSS, org.igniterealtime.smack:smack-core) - [CVE-2016-3149](https://cve.now/CVE-2016-3149.md): Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execu (no CVSS) - [CVE-2016-3150](https://cve.now/CVE-2016-3150.md): Cross-site scripting (XSS) vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03, (no CVSS) - [CVE-2016-3151](https://cve.now/CVE-2016-3151.md): Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CS (no CVSS) - [CVE-2016-3152](https://cve.now/CVE-2016-3152.md): Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extractin (no CVSS) - [CVE-2016-5715](https://cve.now/CVE-2016-5715.md): Open redirect vulnerability in the Console in Puppet Enterprise 2015.x and 2016.x before 2016.4.0 allows remote attackers to redirect users (no CVSS) - [CVE-2016-5737](https://cve.now/CVE-2016-5737.md): The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly marks text/html as a safe mimetype, which (no CVSS) - [CVE-2016-6492](https://cve.now/CVE-2016-6492.md): The MT6573FDVT\_SetRegHW function in camera\_fdvt.c in the MediaTek driver for Linux allows local users to gain privileges via a crafted appli (no CVSS) - [CVE-2016-9299](https://cve.now/CVE-2016-9299.md): The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized (no CVSS, org.jenkins-ci.main:jenkins-core) - [CVE-2016-7790](https://cve.now/CVE-2016-7790.md): Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. (no CVSS) - [CVE-2016-7791](https://cve.now/CVE-2016-7791.md): Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. (no CVSS) - [CVE-2016-8221](https://cve.now/CVE-2016-8221.md): Privilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to manage rack switches or chassis with embedded i (no CVSS, Lenovo Group XClarity Administrator) - [CVE-2016-8605](https://cve.now/CVE-2016-8605.md): The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. (no CVSS) - [CVE-2016-8606](https://cve.now/CVE-2016-8606.md): The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack. (no CVSS) - [CVE-2016-8398](https://cve.now/CVE-2016-8398.md): Unauthenticated messages processed by the UE. (no CVSS, Google Android) - [CVE-2016-8412](https://cve.now/CVE-2016-8412.md): An elevation of privilege vulnerability in the Qualcomm camera could enable a local malicious application to execute arbitrary code within t (no CVSS, Google Android) - [CVE-2016-8415](https://cve.now/CVE-2016-8415.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android) - [CVE-2016-8422](https://cve.now/CVE-2016-8422.md): An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code with (no CVSS, Google Android) - [CVE-2016-8423](https://cve.now/CVE-2016-8423.md): An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code with (no CVSS, Google Android) - [CVE-2016-8424](https://cve.now/CVE-2016-8424.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Android Kernel-3.10) - [CVE-2016-8425](https://cve.now/CVE-2016-8425.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android) - [CVE-2016-8426](https://cve.now/CVE-2016-8426.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android) - [CVE-2016-8427](https://cve.now/CVE-2016-8427.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android) - [CVE-2016-8428](https://cve.now/CVE-2016-8428.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android) - [CVE-2016-8429](https://cve.now/CVE-2016-8429.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android) - [CVE-2016-8430](https://cve.now/CVE-2016-8430.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android) - [CVE-2016-8431](https://cve.now/CVE-2016-8431.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android) - [CVE-2016-8432](https://cve.now/CVE-2016-8432.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android) - [CVE-2016-8433](https://cve.now/CVE-2016-8433.md): An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within t (no CVSS, Google Android) - [CVE-2016-8434](https://cve.now/CVE-2016-8434.md): An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code with (no CVSS, Google Android) - [CVE-2016-8435](https://cve.now/CVE-2016-8435.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android) - [CVE-2016-8436](https://cve.now/CVE-2016-8436.md): An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android) - [CVE-2016-8437](https://cve.now/CVE-2016-8437.md): Improper input validation in Access Control APIs. (no CVSS, Google Android) - [CVE-2016-8438](https://cve.now/CVE-2016-8438.md): Integer overflow leading to a TOCTOU condition in hypervisor PIL. (no CVSS, Google Android) - [CVE-2016-8439](https://cve.now/CVE-2016-8439.md): Possible buffer overflow in trust zone access control API. (no CVSS, Google Android) - [CVE-2016-8440](https://cve.now/CVE-2016-8440.md): Possible buffer overflow in SMMU system call. (no CVSS, Google Android) - [CVE-2016-8441](https://cve.now/CVE-2016-8441.md): Possible buffer overflow in the hypervisor. (no CVSS, Google Android) - [CVE-2016-8442](https://cve.now/CVE-2016-8442.md): Possible unauthorized memory access in the hypervisor. (no CVSS, Google Android) - [CVE-2016-8443](https://cve.now/CVE-2016-8443.md): Possible unauthorized memory access in the hypervisor. (no CVSS, Google Android) - [CVE-2016-8444](https://cve.now/CVE-2016-8444.md): An elevation of privilege vulnerability in the Qualcomm camera could enable a local malicious application to execute arbitrary code within t (no CVSS, Google Android) - [CVE-2016-8445](https://cve.now/CVE-2016-8445.md): An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local maliciou (no CVSS, Google Android) - [CVE-2016-8446](https://cve.now/CVE-2016-8446.md): An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local maliciou (no CVSS, Google Android) - [CVE-2016-8447](https://cve.now/CVE-2016-8447.md): An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local maliciou (no CVSS, Google Android) - [CVE-2016-8448](https://cve.now/CVE-2016-8448.md): An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local maliciou (no CVSS, Google Android) - [CVE-2016-8449](https://cve.now/CVE-2016-8449.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android) - [CVE-2016-8450](https://cve.now/CVE-2016-8450.md): An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android) - [CVE-2016-8451](https://cve.now/CVE-2016-8451.md): An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary (no CVSS, Google Android) - [CVE-2016-8452](https://cve.now/CVE-2016-8452.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android) - [CVE-2016-8453](https://cve.now/CVE-2016-8453.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android) - [CVE-2016-8454](https://cve.now/CVE-2016-8454.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Android Kernel-3.10 Kernel-3.18) - [CVE-2016-8455](https://cve.now/CVE-2016-8455.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android) - [CVE-2016-8456](https://cve.now/CVE-2016-8456.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android) - [CVE-2016-8457](https://cve.now/CVE-2016-8457.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android) - [CVE-2016-8458](https://cve.now/CVE-2016-8458.md): An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary (no CVSS, Google Android) - [CVE-2016-8459](https://cve.now/CVE-2016-8459.md): Possible buffer overflow in storage subsystem. (no CVSS, Google Android) - [CVE-2016-8460](https://cve.now/CVE-2016-8460.md): An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its (no CVSS, Google Android) - [CVE-2016-8461](https://cve.now/CVE-2016-8461.md): An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. (no CVSS, Android Kernel-3.18) - [CVE-2016-8462](https://cve.now/CVE-2016-8462.md): An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. (no CVSS, Google Android) - [CVE-2016-8463](https://cve.now/CVE-2016-8463.md): A denial of service vulnerability in the Qualcomm FUSE file system could enable a remote attacker to use a specially crafted file to cause a (no CVSS, Google Android) - [CVE-2016-8464](https://cve.now/CVE-2016-8464.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android) - [CVE-2016-8465](https://cve.now/CVE-2016-8465.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android) - [CVE-2016-8466](https://cve.now/CVE-2016-8466.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Android Kernel-3.10 Kernel-3.18) - [CVE-2016-8468](https://cve.now/CVE-2016-8468.md): An elevation of privilege vulnerability in Binder could enable a local malicious application to execute arbitrary code within the context of (no CVSS, Google Android) - [CVE-2016-8469](https://cve.now/CVE-2016-8469.md): An information disclosure vulnerability in the camera driver could enable a local malicious application to access data outside of its permis (no CVSS, Google Android) - [CVE-2016-8470](https://cve.now/CVE-2016-8470.md): An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its perm (no CVSS, Google Android) - [CVE-2016-8471](https://cve.now/CVE-2016-8471.md): An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its perm (no CVSS, Google Android) - [CVE-2016-8472](https://cve.now/CVE-2016-8472.md): An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its perm (no CVSS, Google Android) - [CVE-2016-8473](https://cve.now/CVE-2016-8473.md): An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside o (no CVSS, Google Android) - [CVE-2016-8474](https://cve.now/CVE-2016-8474.md): An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside o (no CVSS, Google Android) - [CVE-2016-8475](https://cve.now/CVE-2016-8475.md): An information disclosure vulnerability in the HTC input driver could enable a local malicious application to access data outside of its per (no CVSS, Google Android) - [CVE-2017-0381](https://cve.now/CVE-2017-0381.md): An information disclosure vulnerability in silk/NLSF\_stabilize.c in libopus in Mediaserver could enable a local malicious application to acc (no CVSS, Google Android) - [CVE-2017-0382](https://cve.now/CVE-2017-0382.md): A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitr (no CVSS, Google Android) - [CVE-2017-0383](https://cve.now/CVE-2017-0383.md): An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within th (no CVSS, Google Android) - [CVE-2017-0384](https://cve.now/CVE-2017-0384.md): An elevation of privilege vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious a (no CVSS, Google Android) - [CVE-2017-0385](https://cve.now/CVE-2017-0385.md): An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conte (no CVSS, Google Android) - [CVE-2017-0386](https://cve.now/CVE-2017-0386.md): An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within the (no CVSS, Google Android) - [CVE-2017-0387](https://cve.now/CVE-2017-0387.md): An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the conte (no CVSS, Google Android) - [CVE-2017-0388](https://cve.now/CVE-2017-0388.md): An elevation of privilege vulnerability in the External Storage Provider could enable a local secondary user to read data from an external s (no CVSS, Google Android) - [CVE-2017-0389](https://cve.now/CVE-2017-0389.md): A denial of service vulnerability in core networking could enable a remote attacker to use specially crafted network packet to cause a devic (no CVSS, Google Android) - [CVE-2017-0390](https://cve.now/CVE-2017-0390.md): A denial of service vulnerability in Tremolo/dpen.s in Mediaserver could enable a remote attacker to use a specially crafted file to cause a (no CVSS, Google Android) - [CVE-2017-0391](https://cve.now/CVE-2017-0391.md): A denial of service vulnerability in decoder/ihevcd\_decode.c in libhevc in Mediaserver could enable a remote attacker to use a specially cra (no CVSS, Google Android) - [CVE-2017-0392](https://cve.now/CVE-2017-0392.md): A denial of service vulnerability in VBRISeeker.cpp in libstagefright in Mediaserver could enable a remote attacker to use a specially craft (no CVSS, Google Android) - [CVE-2017-0393](https://cve.now/CVE-2017-0393.md): A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device (no CVSS, Google Android) - [CVE-2017-0394](https://cve.now/CVE-2017-0394.md): A denial of service vulnerability in Telephony could enable a remote attacker to cause a device hang or reboot. (no CVSS, Google Android) - [CVE-2017-0395](https://cve.now/CVE-2017-0395.md): An elevation of privilege vulnerability in Contacts could enable a local malicious application to silently create contact information. (no CVSS, Google Android) - [CVE-2017-0396](https://cve.now/CVE-2017-0396.md): An information disclosure vulnerability in visualizer/EffectVisualizer.cpp in libeffects in Mediaserver could enable a local malicious appli (no CVSS, Google Android) - [CVE-2017-0397](https://cve.now/CVE-2017-0397.md): An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious application to access (no CVSS, Google Android) - [CVE-2017-0399](https://cve.now/CVE-2017-0399.md): An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enab (no CVSS, Google Android) - [CVE-2017-0400](https://cve.now/CVE-2017-0400.md): An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious a (no CVSS, Google Android) - [CVE-2017-0401](https://cve.now/CVE-2017-0401.md): An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enab (no CVSS, Google Android) - [CVE-2017-0402](https://cve.now/CVE-2017-0402.md): An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious a (no CVSS, Google Android) - [CVE-2017-0403](https://cve.now/CVE-2017-0403.md): An elevation of privilege vulnerability in the kernel performance subsystem could enable a local malicious application to execute arbitrary (no CVSS, Google Android) - [CVE-2017-0404](https://cve.now/CVE-2017-0404.md): An elevation of privilege vulnerability in the kernel sound subsystem could enable a local malicious application to execute arbitrary code w (no CVSS, Google Android) - [CVE-2016-6755](https://cve.now/CVE-2016-6755.md): An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code w (no CVSS, Google Android) - [CVE-2016-6756](https://cve.now/CVE-2016-6756.md): An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable a local malicious a (no CVSS, Google Android) - [CVE-2016-6757](https://cve.now/CVE-2016-6757.md): An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable a local malicious a (no CVSS, Google Android) - [CVE-2016-6758](https://cve.now/CVE-2016-6758.md): An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android) - [CVE-2016-6759](https://cve.now/CVE-2016-6759.md): An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android) - [CVE-2016-6760](https://cve.now/CVE-2016-6760.md): An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android) - [CVE-2016-6761](https://cve.now/CVE-2016-6761.md): An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android) - [CVE-2016-6762](https://cve.now/CVE-2016-6762.md): An elevation of privilege vulnerability in the libziparchive library could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android) - [CVE-2016-6763](https://cve.now/CVE-2016-6763.md): A denial of service vulnerability in Telephony could enable a local malicious application to use a specially crafted file to cause a device (no CVSS, Google Android) - [CVE-2016-6764](https://cve.now/CVE-2016-6764.md): A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. (no CVSS, Google Android) - [CVE-2016-6765](https://cve.now/CVE-2016-6765.md): A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a devic (no CVSS, Google Android) - [CVE-2016-6766](https://cve.now/CVE-2016-6766.md): A denial of service vulnerability in libmedia and libstagefright in Mediaserver could enable an attacker to use a specially crafted file to (no CVSS, Google Android) - [CVE-2016-6767](https://cve.now/CVE-2016-6767.md): A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. (no CVSS, Google Android) - [CVE-2016-6768](https://cve.now/CVE-2016-6768.md): A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitr (no CVSS, Google Android) - [CVE-2016-6769](https://cve.now/CVE-2016-6769.md): An elevation of privilege vulnerability in Smart Lock could enable a local malicious user to access Smart Lock settings without a PIN. (no CVSS, Google Android) - [CVE-2016-6770](https://cve.now/CVE-2016-6770.md): An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access system functions beyond it (no CVSS, Google Android) - [CVE-2016-6771](https://cve.now/CVE-2016-6771.md): An elevation of privilege vulnerability in Telephony could enable a local malicious application to access system functions beyond its access (no CVSS, Google Android) - [CVE-2016-6772](https://cve.now/CVE-2016-6772.md): An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to execute arbitrary code within the context of (no CVSS, Google Android) - [CVE-2016-6773](https://cve.now/CVE-2016-6773.md): An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application to access data outsi (no CVSS, Google Android) - [CVE-2016-6774](https://cve.now/CVE-2016-6774.md): An information disclosure vulnerability in Package Manager could enable a local malicious application to bypass operating system protections (no CVSS, Google Android) - [CVE-2016-6775](https://cve.now/CVE-2016-6775.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android) - [CVE-2016-6776](https://cve.now/CVE-2016-6776.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android) - [CVE-2016-6777](https://cve.now/CVE-2016-6777.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android) - [CVE-2016-6778](https://cve.now/CVE-2016-6778.md): An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code w (no CVSS, Google Android) - [CVE-2016-6779](https://cve.now/CVE-2016-6779.md): An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code w (no CVSS, Android Kernel-3.10) - [CVE-2016-6780](https://cve.now/CVE-2016-6780.md): An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code w (no CVSS, Google Android) - [CVE-2016-6781](https://cve.now/CVE-2016-6781.md): An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within t (no CVSS, Google Android) - [CVE-2016-6782](https://cve.now/CVE-2016-6782.md): An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within t (no CVSS, Google Android) - [CVE-2016-6783](https://cve.now/CVE-2016-6783.md): An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within t (no CVSS, Google Android) - [CVE-2016-6784](https://cve.now/CVE-2016-6784.md): An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within t (no CVSS, Android Android-N/A) - [CVE-2016-6785](https://cve.now/CVE-2016-6785.md): An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within t (no CVSS, Google Android) - [CVE-2016-6788](https://cve.now/CVE-2016-6788.md): An elevation of privilege vulnerability in the MediaTek I2C driver could enable a local malicious application to execute arbitrary code with (no CVSS, Google Android) - [CVE-2016-6789](https://cve.now/CVE-2016-6789.md): An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitr (no CVSS, Google Android) - [CVE-2016-6790](https://cve.now/CVE-2016-6790.md): An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitr (no CVSS, Android Kernel-3.18) - [CVE-2016-6791](https://cve.now/CVE-2016-6791.md): An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android) - [CVE-2016-8391](https://cve.now/CVE-2016-8391.md): An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android) - [CVE-2016-8392](https://cve.now/CVE-2016-8392.md): An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android) - [CVE-2016-8393](https://cve.now/CVE-2016-8393.md): An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary (no CVSS, Google Android) - [CVE-2016-8394](https://cve.now/CVE-2016-8394.md): An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary (no CVSS, Google Android) - [CVE-2016-8395](https://cve.now/CVE-2016-8395.md): A denial of service vulnerability in the NVIDIA camera driver could enable an attacker to cause a local permanent denial of service, which m (no CVSS, Google Android) - [CVE-2016-8396](https://cve.now/CVE-2016-8396.md): An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to access data outside of it (no CVSS, Google Android) - [CVE-2016-8397](https://cve.now/CVE-2016-8397.md): An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its (no CVSS, Google Android) - [CVE-2016-8399](https://cve.now/CVE-2016-8399.md): An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary c (no CVSS, Google Android) - [CVE-2016-8400](https://cve.now/CVE-2016-8400.md): An information disclosure vulnerability in the NVIDIA librm library (libnvrm) could enable a local malicious application to access data outs (no CVSS, Google Android) - [CVE-2016-8401](https://cve.now/CVE-2016-8401.md): An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could (no CVSS, Google Android) - [CVE-2016-8402](https://cve.now/CVE-2016-8402.md): An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could (no CVSS, Google Android) - [CVE-2016-8403](https://cve.now/CVE-2016-8403.md): An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could (no CVSS, Google Android) - [CVE-2016-8404](https://cve.now/CVE-2016-8404.md): An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could (no CVSS, Android Kernel-3.10) - [CVE-2016-8405](https://cve.now/CVE-2016-8405.md): An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could (no CVSS, Google Android) - [CVE-2016-8406](https://cve.now/CVE-2016-8406.md): An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could (no CVSS, Google Android) - [CVE-2016-8407](https://cve.now/CVE-2016-8407.md): An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could (no CVSS, Google Android) - [CVE-2016-8408](https://cve.now/CVE-2016-8408.md): An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its (no CVSS, Google Android) - [CVE-2016-8409](https://cve.now/CVE-2016-8409.md): An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its (no CVSS, Google Android) - [CVE-2016-8410](https://cve.now/CVE-2016-8410.md): An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of it (no CVSS, Google Android) - [CVE-2017-5225](https://cve.now/CVE-2017-5225.md): LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSa (CVSS 8.8) - [CVE-2016-10131](https://cve.now/CVE-2016-10131.md): system/libraries/Email.php in CodeIgniter before 3.1.3 allows remote attackers to execute arbitrary code by leveraging control over the emai (no CVSS, bcit-ci/codeigniter) - [CVE-2016-9131](https://cve.now/CVE-2016-9131.md): named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of ser (no CVSS) - [CVE-2016-9147](https://cve.now/CVE-2016-9147.md): named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and d (no CVSS) - [CVE-2016-9444](https://cve.now/CVE-2016-9444.md): named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of ser (no CVSS) - [CVE-2017-5345](https://cve.now/CVE-2017-5345.md): SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute a (no CVSS) - [CVE-2017-5346](https://cve.now/CVE-2017-5346.md): SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to exe (no CVSS, genix/cms) - [CVE-2017-5347](https://cve.now/CVE-2017-5347.md): SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitr (no CVSS) - [CVE-2017-5350](https://cve.now/CVE-2017-5350.md): Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allow attackers to crash systemUI by leveraging incomplete exception handl (no CVSS) - [CVE-2017-5351](https://cve.now/CVE-2017-5351.md): Samsung Note devices with KK(4.4), L(5.0/5.1), and M(6.0) software allow attackers to crash the system by creating an arbitrarily large numb (no CVSS) - [CVE-2016-7479](https://cve.now/CVE-2016-7479.md): In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may lead to use-af (no CVSS, PHP 7.x) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-01-12 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.