Skip to content
OpenAdvisories

Archive

8 September 2017

Vulnerabilities first published on this day (UTC), newest first.

58 results · Feed

  • Unscored —

    A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0,…

  • Unscored —

    A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, …

  • Unscored —

    A remote code execution vulnerability in the Android media framework (libvorbis). Product: Android. Versions: 4.4.4, 5.…

  • Unscored —

    A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0,…

  • Unscored —

    A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.…

  • Unscored —

    A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0,…

  • Unscored —

    A elevation of privilege vulnerability in the MediaTek libmtkomxvdec. Product: Android. Versions: Android kernel. Andro…

  • Unscored —

    A information disclosure vulnerability in the Android media framework (audioflinger). Product: Android. Versions: 4.4.4…

  • Unscored —

    The driver_override implementation in drivers/base/platform.c in the Linux kernel before 4.12.1 allows local users to g…

  • Unscored —

    The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive …

  • Unscored —

    The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator …

  • Unscored —

    Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest …

  • Unscored —

    Vulnerability in Easy Joomla Backup v3.2.4. The software creates a copy of the backup in the web root with an easily gu…

  • Unscored —

    Directory traversal vulnerability in synphotoio in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote …

  • Unscored —

    Multiple SQL injection vulnerabilities in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allow remote attackers …

  • Unscored —

    Server-side request forgery (SSRF) vulnerability in file_upload.php in Synology Photo Station before 6.7.4-3433 and 6.3…

  • Unscored —
    CVE-2017-11611 Public exploit

    Wolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks. The vulnerability exists due to insufficient sanitization o…

  • Unscored —
    CVE-2017-9095 Public exploit

    XXE in Diving Log 6.0 allows attackers to remotely view local files through a crafted dive.xml file that is mishandled …