Archive
12 January 2017
Vulnerabilities first published on this day (UTC), newest first.
159 results · Feed
-
Unscored —
Open redirect vulnerability in the Console in Puppet Enterprise before 2015.2.1 allows remote attackers to redirect use…
-
Unscored —
The MT6573FDVT_SetRegHW function in camera_fdvt.c in the MediaTek driver for Linux allows local users to gain privilege…
-
Unscored —
Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by down…
-
Unscored —
Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmw…
-
Unscored —
Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmwar…
-
Critical 9.8
Improper Neutralization of Special Elements used in an LDAP Query in Jenkins
The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.
-
Medium 5.9
Smack allows the bypass of TLS protections
Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle attackers to bypass TLS protections and trigger use of cleartext for client authentication by stripping the "starttls" …
-
Unscored —
The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly marks text/html as a …
-
Unscored —
Open redirect vulnerability in the Console in Puppet Enterprise 2015.x and 2016.x before 2016.4.0 allows remote attacke…
-
Unscored —
Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload an …
-
Unscored —
Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload 'ph…
-
Unscored —
Privilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to manage rack switches or ch…
-
Unscored —
The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithr…
-
Unscored —
The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol …
-
Unscored —
Possible buffer overflow in the hypervisor. Inappropriate usage of a static array could lead to a buffer overrun. Produ…
-
Unscored —
A denial of service vulnerability in the Qualcomm FUSE file system could enable a remote attacker to use a specially cr…
-
Unscored —
Integer overflow leading to a TOCTOU condition in hypervisor PIL. An integer overflow exposes a race condition that may…
-
Unscored —
An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execut…
-
Unscored —
An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute ar…
-
Unscored —
An information disclosure vulnerability in the camera driver could enable a local malicious application to access data …
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute …
-
Unscored —
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to exec…
-
Unscored —
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to exec…
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute …
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute …
-
Unscored —
Possible buffer overflow in SMMU system call. Improper input validation in ADSP SID2CB system call may result in hyperv…
-
Unscored —
Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead…
-
Unscored —
An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execut…
-
Unscored —
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to exec…
-
Unscored —
An elevation of privilege vulnerability in Binder could enable a local malicious application to execute arbitrary code …
-
Unscored —
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to exec…
-
Unscored —
An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could en…
-
Unscored —
An elevation of privilege vulnerability in the Qualcomm camera could enable a local malicious application to execute ar…
-
Unscored —
Possible unauthorized memory access in the hypervisor. Lack of input validation could allow hypervisor memory to be acc…
-
Unscored —
An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to exec…
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute …
-
Unscored —
An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its p…
-
Unscored —
An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access dat…
-
Unscored —
An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application …