Archive
18 August 2017
Vulnerabilities first published on this day (UTC), newest first.
176 results · Feed
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZ…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offs…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, an overflow check in the USB interface …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts can potentially cause…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths was missin…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of a buffer length was missi…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a driver can potentially leak kernel me…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exist…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected Measurement…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, an array index out of bounds vulnerabil…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offs…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists wh…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, when downloading a file, an excessive a…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Sec…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not pro…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not su…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a use-after-free vulnerability exists i…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected Measurement…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images b…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow …
-
High 8.8
Spring Batch Admin vulnerable to Cross-site request forgery (CSRF) in the file upload functionality
Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.
-
Medium 5.4
Spring Batch Admin vulnerable to Stored Cross-site scripting (XSS) in the file upload functionality
Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML via the file upload functionality.
-
Unscored —
lib\modules\contributors\contributor_list_table.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordP…
-
Unscored —
Core\Admin\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has XSS in the PATH_INFO to wp-ad…
-
Unscored —
classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in an untrash…
-
Unscored —
classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in a delete a…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driv…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in a camera driver ioctl, a kernel over…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driv…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL han…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly req…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug in…