Archive
August 2017
Vulnerabilities first published in this month (UTC), newest first.
1,540 results · Feed
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not su…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a use-after-free vulnerability exists i…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected Measurement…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images b…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow …
-
High 8.8
Spring Batch Admin vulnerable to Cross-site request forgery (CSRF) in the file upload functionality
Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.
-
Medium 5.4
Spring Batch Admin vulnerable to Stored Cross-site scripting (XSS) in the file upload functionality
Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML via the file upload functionality.
-
Unscored —
lib\modules\contributors\contributor_list_table.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordP…
-
Unscored —
Core\Admin\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has XSS in the PATH_INFO to wp-ad…
-
Unscored —
classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in an untrash…
-
Unscored —
classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in a delete a…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driv…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in a camera driver ioctl, a kernel over…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driv…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL han…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly req…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug in…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function, a value from user…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free func…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exist…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing cer…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may imp…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver pot…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can potentially be overwr…
-
Unscored —CVE-2015-7945 Public exploit
The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.1…
-
Unscored —
The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.1…
-
Unscored —
A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0,…
-
High 7.5
The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereferenc…
-
Unscored —
Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the Devices directory, which allows local users to gai…
-
Unscored —
Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users …
-
Unscored —
ToMAX R60G R60GV2-V2.0-v.2.6.3-170330 devices do not have any protection against a CSRF attack.
-
Unscored —
ASUS DSL-N10S V2.1.16_APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege …
-
Unscored —
ASUS DSL-N10S V2.1.16_APAC devices allow CSRF.
-
Unscored —
ASUS DSL-N10S V2.1.16_APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName p…
-
Unscored —
SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
Heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 al…
-
Unscored —
Stack-based buffer overflow in the inet_pton function in network/inet_pton.c in musl libc 0.9.15 through 1.0.4, and 1.1…