Archive
12 January 2018
Vulnerabilities first published on this day (UTC), newest first.
118 results · Feed
-
Unscored —
An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 7.0, 7.1.…
-
Unscored —
An information disclosure vulnerability in the Android media framework (aac). Product: Android. Versions: 7.0, 7.1.1, 7…
-
Unscored —
In bta_scan_results_cb_impl of btif_ble_scanner.cc, there is possible resource exhaustion if a large number of repeated…
-
Unscored —CVE-2017-13209 Public exploit
In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on th…
-
Unscored —
In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privil…
-
Unscored —CVE-2017-13216 Public exploit
In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma. This coul…
-
Unscored —
In the ihevcd_parse_slice_header function of ihevcd_parse_slice_header.c a slice address of zero after the first slice …
-
Unscored —
In the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after free due to a race cond…
-
Unscored —
A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions: Android kernel. And…
-
Unscored —
A vulnerability in the Android media framework (ex) related to composition of frames lacking a color map. Product: Andr…
-
Unscored —
A denial of service vulnerability in the Upstream kernel synaptics touchscreen controller. Product: Android. Versions: …
-
Unscored —
An issue was discovered in Skybox Platform before 7.5.201. Stored cross-site scripting vulnerabilities exist in the tit…
-
Unscored —
An issue was discovered in Skybox Platform before 7.5.201. Directory Traversal exists in /skyboxview/webskybox/attachme…
-
Unscored —
An issue was discovered in Skybox Platform before 7.5.201. Remote Unauthenticated Code Execution exists via a WAR archi…
-
Unscored —
An issue was discovered in Skybox Platform before 7.5.201. SQL Injection exists in /skyboxview/webservice/services/Vers…
-
Unscored —
An issue was discovered in Skybox Platform before 7.5.401. Reflected cross-site scripting vulnerabilities exist in /sky…
-
Unscored —
In Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the unzip_match function in runz…
-
Unscored —
In ImageMagick 7.0.7-1 Q16, a memory exhaustion vulnerability was found in the function ReadTIFFImage in coders/tiff.c,…
-
Unscored —
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which a…
-
Unscored —
In ImageMagick 7.0.6-10 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which …
-
Unscored —
An Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running…
-
Unscored —
An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. A specially-crafted malicious fil…
-
Unscored —
An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. Specially-crafted malicious files…
-
Unscored —
An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products runni…
-
Unscored —
An issue was discovered in Moxa MXview v2.8 and prior. The unquoted service path escalation vulnerability could allow a…
-
Unscored —
The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module.
-
Unscored —
The Jetpack plugin before 4.0.3 for WordPress has XSS via a crafted Vimeo link.
-
Unscored —
Jolla Sailfish OS before 1.1.2.16 allows remote attackers to spoof phone numbers and trigger calls to arbitrary numbers…
-
Unscored —
The Yodobashi App for Android 1.2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man…
-
Unscored —
node/utils/ExportEtherpad.js in Etherpad 1.5.x before 1.5.2 might allow remote attackers to obtain sensitive informatio…
-
Unscored —
A stack-based buffer overflow in Flexense DiskBoss 8.8.16 and earlier allows unauthenticated remote attackers to execut…
-
Unscored —CVE-2018-5315 Public exploit
The Wachipi WP Events Calendar plugin 1.0 for WordPress has SQL Injection via the event_id parameter to event.php.
-
Unscored —
The backup mechanism in the adb tool in Android might allow attackers to inject additional applications (APKs) and exec…
-
Unscored —
cgi-bin/AZ_Retrain.cgi in Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices does not check for authentication…
-
Unscored —
Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices allow remote attackers to obtain sensitive device configura…
-
Unscored —
Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers t…
-
Unscored —
Use-after-free vulnerability in hw/pci/pcie.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denia…
-
Unscored —
The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 throu…