Archive
18 August 2017
Vulnerabilities first published on this day (UTC), newest first.
176 results · Feed
-
Unscored —
There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP b…
-
Unscored —
There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that wi…
-
Unscored —
There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open pare…
-
Unscored —
There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial o…
-
Unscored —
There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GN…
-
Unscored —
There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in …
-
Unscored —
There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in …
-
Unscored —
There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in G…
-
Unscored —
There is an assertion abort in the function parse_attributes() in data/sys-file-reader.c of the libpspp library in GNU …
-
Unscored —
There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator() in eval.cp…
-
Unscored —
An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1. If reloading the trust materia…
-
Medium 5.3
Improper Privilege Management in X-Pack
The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reporting_user role could execute a report with the permissions of another reportin…
-
Unscored —
Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8.
-
Unscored —
A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact.
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_d…
-
Unscored —
Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows lo…
-
Unscored —
A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions ea…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption ca…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a WLAN driver can l…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can le…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace string is not NULL-termi…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from users…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in two KGSL driver fun…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, insecure ciphersuites were included in …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, the validation of filesystem access was…
-
Unscored —CVE-2015-4071 Public exploit
The Helpdesk Pro Plugin before 1.4.0 for Joomla! allows remote attackers to read the support tickets of arbitrary users…
-
Unscored —
Kguard Digital Video Recorder 104, 108, v2 does not have any authorization or authentication between an ActiveX client …
-
Unscored —
The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not validated prior to bei…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths is missing…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer may be dereferenced in t…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GERAN where a…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow …