Archive
22 December 2017
Vulnerabilities first published on this day (UTC), newest first.
35 results · Feed
-
Unscored —
An issue was discovered in Enigmail before 1.9.9. Signature spoofing is possible because the UI does not properly disti…
-
Unscored —
An issue was discovered in Enigmail before 1.9.9 that allows remote attackers to trigger use of an intended public key …
-
Unscored —
An issue was discovered in Enigmail before 1.9.9. Improper Random Secret Generation occurs because Math.Random() is use…
-
Unscored —
An issue was discovered in Enigmail before 1.9.9. A remote attacker can obtain cleartext content by sending an encrypte…
-
Unscored —
An issue was discovered in Enigmail before 1.9.9. Regular expressions are exploitable for Denial of Service, because of…
-
Unscored —
An issue was discovered in Enigmail before 1.9.9. In a variant of CVE-2017-17847, signature spoofing is possible for mu…
-
Unscored —
ServersCheck Monitoring Software before 14.2.3 is prone to a cross-site scripting vulnerability as user supplied-data i…
-
Unscored —
The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.…
-
Unscored —
Huawei Honor 8 smartphone with software versions earlier than FRD-L04C567B389 and earlier than FRD-L14C567B389 have a p…
-
Unscored —
Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low ve…
-
Unscored —
RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R00…
-
Unscored —
Huawei iReader app before 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage p…
-
Unscored —
Huawei HG8245H version earlier than V300R018C00SPC110 has an authentication bypass vulnerability. An attacker can acces…
-
Unscored —
RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R00…
-
Unscored —
Huawei SmartCare V200R003C10 has a stored XSS (cross-site scripting) vulnerability in the dashboard module. A remote au…
-
Unscored —
RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R00…
-
Unscored —
AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, …
-
Unscored —
The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334(C00) and Mate 9 Pro Huawei smart …
-
Unscored —
Huawei SmartCare V200R003C10 has a CSV injection vulnerability. An remote authenticated attacker could inject malicious…
-
Unscored —
Some Huawei smartphones with software of BGO-L03C158B003CUSTC158D001 and BGO-L03C331B009CUSTC331D001 have a DoS vulnera…
-
Unscored —
Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Netw…
-
Unscored —
Huawei iReader app before 8.0.2.301 has an arbitrary file deletion vulnerability due to the lack of input validation. A…
-
Unscored —
Huawei iReader app before 8.0.2.301 has an input validation vulnerability due to insufficient validation on the URL use…
-
Unscored —
An improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM) before 6.1.4-15217 and …
-
Unscored —
Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier all…
-
Unscored —
H2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the server via specially crafted …
-
Unscored —
Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. Show Off v1.85 en and earlier allows an a…
-
Unscored —
Buffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of-service in the server via…
-
Unscored —
H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via unspecified vector…
-
Unscored —
Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privil…
-
Unscored —
H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via specially crafted …
-
Unscored —
kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corrup…
-
Unscored —
The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial…
-
Unscored —
An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or poten…
-
Unscored —
A Credentials Management issue was discovered in Moxa NPort W2150A versions prior to 1.11, and NPort W2250A versions pr…