Archive
September 2017
Vulnerabilities first published in this month (UTC), newest first.
1,228 results · Feed
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, an output buffer is accessed in one thr…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, the length of the MAC address is not ch…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing a vendor sub-command, …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function…
-
Unscored —
A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel t…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspec…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition can allow access to al…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function msm_dba_register_client…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in functions msm_isp_check_stream_cfg_c…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, user controlled variables "nr_cmds" and…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to g…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong dat…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by-one error in a camera …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msm_compr_ioctl_shared, var…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and …
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls into ioctl RMNET_IOCTL…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in audio_aio_ion_lookup_vaddr, the buff…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is possible in c_s…
-
High 8.8
Kallithea cross-site request forgery (CSRF) vulnerability
Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2.
-
Medium 6.1
Improper Neutralization of Input During Web Page Generation in IPython
Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path.
-
Medium 6.1
NodeBB Cross-site Scripting Vulnerability in Markdown Processing
Multiple cross-site scripting (XSS) vulnerabilities in NodeBB before 0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) javascript: or (2) data: URLs.
-
Unscored —
The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var…
-
Unscored —
ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem…
-
Unscored —
The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of serv…
-
Unscored —
An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or …
-
Unscored —
An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or …
-
Unscored —
In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticate…
-
Unscored —
Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis…
-
Unscored —
In sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp, leading to an invali…
-
Unscored —
In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp.
-
Unscored —
In sam2p 0.49.3, the in_xpm_reader function in in_xpm.cpp has an integer signedness error, leading to a crash when writ…
-
Unscored —
In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in map…
-
Unscored —
In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to Do…
-
Unscored —
In sam2p 0.49.3, the pcxLoadRaster function in in_pcx.cpp has an integer signedness error leading to a heap-based buffe…
-
Unscored —
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance…
-
Unscored —
A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unw…