Archive
21 September 2017
Vulnerabilities first published on this day (UTC), newest first.
82 results · Feed
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function msm_dba_register_client…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in functions msm_isp_check_stream_cfg_c…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, user controlled variables "nr_cmds" and…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to g…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong dat…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by-one error in a camera …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msm_compr_ioctl_shared, var…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls into ioctl RMNET_IOCTL…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in audio_aio_ion_lookup_vaddr, the buff…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is possible in c_s…
-
High 8.8
Kallithea cross-site request forgery (CSRF) vulnerability
Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2.
-
Medium 6.1
Improper Neutralization of Input During Web Page Generation in IPython
Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path.
-
Medium 6.1
NodeBB Cross-site Scripting Vulnerability in Markdown Processing
Multiple cross-site scripting (XSS) vulnerabilities in NodeBB before 0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) javascript: or (2) data: URLs.
-
Unscored —
The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var…
-
Unscored —
ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem…
-
Unscored —
The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of serv…
-
Unscored —
An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or …
-
Unscored —
An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or …
-
Unscored —
In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticate…
-
Unscored —
Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis…
-
Unscored —
In sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp, leading to an invali…
-
Unscored —
In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp.
-
Unscored —
In sam2p 0.49.3, the in_xpm_reader function in in_xpm.cpp has an integer signedness error, leading to a crash when writ…
-
Unscored —
In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in map…
-
Unscored —
In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to Do…
-
Unscored —
In sam2p 0.49.3, the pcxLoadRaster function in in_pcx.cpp has an integer signedness error leading to a heap-based buffe…
-
Unscored —
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance…
-
Unscored —
A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unw…
-
Unscored —
A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a…
-
Unscored —
A vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS) could allow an unauthenticate…
-
Unscored —
A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phone…
-
Unscored —
A vulnerability in the web interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attack…
-
Unscored —
A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality …
-
Unscored —
A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated,…
-
Unscored —
A vulnerability in the CLI of Cisco UCS Central Software could allow an authenticated, local attacker to gain shell acc…
-
Unscored —
A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an au…
-
Unscored —
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixe…