Archive
18 August 2017
Vulnerabilities first published on this day (UTC), newest first.
176 results · Feed
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function, a value from user…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free func…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exist…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing cer…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may imp…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver pot…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can potentially be overwr…
-
Unscored —CVE-2015-7945 Public exploit
The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.1…
-
Unscored —
The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.1…
-
Unscored —
A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0,…
-
High 7.5
The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereferenc…
-
Unscored —
Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the Devices directory, which allows local users to gai…
-
Unscored —
Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users …
-
Unscored —
ToMAX R60G R60GV2-V2.0-v.2.6.3-170330 devices do not have any protection against a CSRF attack.
-
Unscored —
ASUS DSL-N10S V2.1.16_APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege …
-
Unscored —
ASUS DSL-N10S V2.1.16_APAC devices allow CSRF.
-
Unscored —
ASUS DSL-N10S V2.1.16_APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName p…
-
Unscored —
SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
Heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 al…
-
Unscored —
Stack-based buffer overflow in the inet_pton function in network/inet_pton.c in musl libc 0.9.15 through 1.0.4, and 1.1…
-
Unscored —
Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ before 11.72 allows physically proximate…
-
Medium 6.5
attic has improper verification of unencrypted backups
attic before 0.15 does not confirm unencrypted backups with the user, which allows remote attackers with read and write privileges for the encrypted repository to obtain potentially sensitive information by changing the manifest type byte of the repository to…
-
High 7.8
open-uri-cached Gem for Ruby Unsafe Temporary File Creation Enables Code Execution
The open-uri-cached rubygem allows local users to execute arbitrary Ruby code by creating a directory under /tmp containing "openuri-" followed by a crafted UID, and putting Ruby code in said directory once a meta file is created.
-
Unscored —
Cross-Site Scripting (XSS) exists in NexusPHP 1.5 via the type parameter to shoutbox.php.
-
Unscored —
NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial…
-
Unscored —
Unprivileged user can access all functions in the Surveillance Station component in QNAP TS212P devices with firmware 4…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Paessler PRTG Network Monitor before 17.2.32.2279 allows remote attackers t…
-
Unscored —CVE-2017-9767 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to in…
-
Unscored —
IBM WebSphere Application Server 8.0, 8.5, and 9.0 could provide weaker than expected security after using the Admin Co…
-
Unscored —
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows …
-
Unscored —
The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which a…
-
Unscored —
D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?R…
-
Unscored —
Unspecified vulnerability in ASSA ABLOY APTUS Styra Porttelefonkort 4400 before A2 has unknown impact and attack vector…
-
High 7.5
Openstack Aodh can be used to launder Keystone trusts
Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenti…
-
Unscored —
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.
-
Unscored —
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadH…
-
Unscored —
libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function.
-
Unscored —
Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows rem…
-
Unscored —
Directory traversal vulnerability in ajaxfileupload.php in Kayson Group Ltd. phpGrid before 7.2.5 allows remote attacke…