Archive
13 June 2017
Vulnerabilities first published on this day (UTC), newest first.
121 results · Feed
-
Unscored —
In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed whe…
-
Unscored —
In all Android releases from CAF using the Linux kernel, a race condition potentially exists in the ioctl handler of a …
-
Unscored —
In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerabili…
-
Unscored —
In a camera driver function in all Android releases from CAF using the Linux kernel, a bounds check is missing when wri…
-
Unscored —
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a camera function.
-
Unscored —
In all Android releases from CAF using the Linux kernel, userspace-controlled parameters for flash initialization are n…
-
Unscored —
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists while loading a firmwar…
-
Unscored —
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an IPA driver.
-
Unscored —
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a WLAN function due …
-
Unscored —
In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading t…
-
Unscored —
In all Android releases from CAF using the Linux kernel, an out of bounds access can potentially occur in a camera func…
-
Unscored —
In all Android releases from CAF using the Linux kernel, a memory structure in a camera driver is not properly protecte…
-
Unscored —
IBM Maximo Asset Management 7.5 and 7.6 could allow a remote authenticated attacker to execute arbitrary commands on th…
-
Unscored —
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip…
-
Unscored —
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to e…
-
Unscored —
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to e…
-
Unscored —
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to e…
-
Unscored —
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to e…
-
Unscored —
IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error con…
-
Unscored —
The vmw_gb_surface_define_ioctl function (accessible via DRM_IOCTL_VMW_GB_SURFACE_CREATE) in drivers/gpu/drm/vmwgfx/vmw…
-
Unscored —CVE-2017-9603 Public exploit
SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitr…
-
Critical 9.8
New Relic .NET Agent contains SQL Injection
New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving failure to escape quotes during use of the Slow Queries feature, as demonstrated by a mishandled quote in a VALUES clause of an INSERT statement, after b…
-
Unscored —CVE-2017-9429 Public exploit
SQL injection vulnerability in the Event List plugin 0.7.8 for WordPress allows an authenticated user to execute arbitr…
-
Unscored —
Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords.
-
Unscored —
libreswan before 3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto daemon r…
-
Unscored —
Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges.
-
High 7.5
tlslite remote denial of service vulnerability
The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service (runtime exception and process crash).
-
Unscored —
The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key.
-
Unscored —
/var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer (QCI) before 1.0 GA is created wo…
-
Unscored —
KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure th…
-
Unscored —
A design flaw in authentication in Synology Photo Station 6.0-2528 through 6.7.1-3419 allows local users to obtain cred…
-
Unscored —
An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release v…
-
Unscored —
An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 2…
-
Unscored —
An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to…
-
Unscored —
An issue was discovered in Pivotal PCF Tile Generator versions prior to 6.0.0. Tiles created by the PCF Tile Generator …
-
Medium 6.5
Blind SQL Injection with privileged Cloud Foundry UAA endpoints
An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x versions prior to v3.6.9, 3.9.x versions prior to v3.9.11, and other versions prior to v3.16.0; and UAA bosh release (uaa…
-
Unscored —
An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. …
-
Unscored —
An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior t…
-
Unscored —
An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions …
-
Unscored —
An issue was discovered in Cloud Foundry Foundation cf-release v255 and Staticfile buildpack versions v1.4.0 - v1.4.3. …