Archive
3 October 2017
Vulnerabilities first published on this day (UTC), newest first.
43 results · Feed
-
Unscored —
An information disclosure vulnerability in the Broadcom wifi driver. Product: Android. Versions: Android kernel. Androi…
-
Unscored —
An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 4.4.4,…
-
Unscored —
An elevation of privilege vulnerability in the Broadcom wifi driver. Product: Android. Versions: Android kernel. Androi…
-
Unscored —
An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 4.4.4,…
-
Unscored —
An information disclosure vulnerability in the Android system (rild). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, …
-
Unscored —CVE-2017-0806 Public exploit
An elevation of privilege vulnerability in the Android framework (gatekeeperresponse). Product: Android. Versions: 6.0,…
-
Unscored —
An information disclosure vulnerability in the Android framework (file system). Product: Android. Versions: 7.0, 7.1.1,…
-
Unscored —
An elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions: Android kernel. Android…
-
Unscored —
An elevation of privilege vulnerability in the Huawei bootloader. Product: Android. Versions: Android kernel. Android I…
-
Unscored —
An elevation of privilege vulnerability in the Android system (camera). Product: Android. Versions: 6.0.1, 7.0, 7.1.1, …
-
Unscored —
An information disclosure vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.…
-
Unscored —
A vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A…
-
Unscored —
An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7…
-
Unscored —CVE-2017-0807 Public exploit
An elevation of privilege vulnerability in the Android framework (ui framework). Product: Android. Versions: 4.4.4, 5.0…
-
Unscored —
An elevation of privilege vulnerability in the HTC bootloader. Product: Android. Versions: Android kernel. Android ID: …
-
Unscored —
An elevation of privilege vulnerability in the Motorola bootloader. Product: Android. Versions: Android kernel. Android…
-
Unscored —
A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.…
-
Unscored —
A vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A…
-
Unscored —
A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1…
-
Unscored —
An elevation of privilege vulnerability in the Android media framework (audio hal). Product: Android. Versions: 7.0, 7.…
-
Unscored —
A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.…
-
Unscored —
A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1…
-
Unscored —
A vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A…
-
Unscored —
The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and al…
-
Unscored —
OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow vulnerability when key-method …
-
Unscored —
IBM WebSphere Message Broker (IBM Integration Bus 9.0 and 10.0) could allow an unauthorized user to obtain sensitive in…
-
Unscored —
A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy…
-
Unscored —
PRTG Network Monitor version 17.3.33.2830 is vulnerable to reflected Cross-Site Scripting on error.htm (the error page)…
-
Unscored —
PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all sensor titles, related to…
-
High 7.5
Regular Expression Denial of Service in tough-cookie
A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CP…
-
High 8.1
Unrestricted Upload of File with Dangerous Type Apache Tomcat
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP fil…
KEV Mar 25, 2022 -
Unscored —
Stack overflow in custom XML-parser in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LD…
-
Unscored —
Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentin…
-
Unscored —
Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to S…
-
Unscored —
Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products pri…
-
Unscored —
Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55…
-
Unscored —
In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior t…
-
Unscored —
In Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274, in so…
-
Unscored —
The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4 allows local users to obtain sensitive inf…
-
Unscored —
ReadDCMImage in coders/dcm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (NULL pointe…