Archive
February 2018
Vulnerabilities first published in this month (UTC), newest first.
1,330 results · Feed
-
Unscored —
ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows…
-
Unscored —
The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary O…
-
Unscored —
Arbitrary File Read in Saperion Web Client version 7.5.2 83166.
-
Unscored —
Remote Code Execution in Saperion Web Client version 7.5.2 83166.
-
Unscored —
`tempdir` crate has been deprecated; use `tempfile` instead
The [`tempdir`](https://crates.io/crates/tempdir) crate has been deprecated and the functionality is merged into [`tempfile`](https://crates.io/crates/tempfile).
-
Critical 9.8
Missing certificate validation in Apache JMeter
When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauthorized code.
-
Unscored —
A stack-based buffer over-read in the ComputeResizeImage function in the MagickCore/accelerate.c file of ImageMagick 7.…
-
Unscored —
An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within…
-
Unscored —
A remote code execution vulnerability exists in Schneider Electric's StruxureOn Gateway versions 1.1.3 and prior. Uploa…
-
Unscored —
A security misconfiguration vulnerability exists in Schneider Electric's IGSS Mobile application versions 3.01 and prio…
-
Unscored —
A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA An…
-
Unscored —
A security misconfiguration vulnerability exists in Schneider Electric's IGSS SCADA Software versions 12 and prior. Sec…
-
Unscored —
An information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application version 3.01 and prior. …
-
Unscored —
In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, rela…
-
Unscored —
In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote atta…
-
Unscored —
In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2::getULong function in…
-
Unscored —
In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remo…
-
Unscored —
Dell EMC SupportAssist Enterprise version 1.1 creates a local Windows user account named "OMEAdapterUser" with a defaul…
-
Unscored —
The futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial…
-
Unscored —
A elevation of privilege vulnerability in the Upstream kernel audio driver. Product: Android. Versions: Android kernel.…
-
Unscored —
In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion. This could lead to a remote …
-
Unscored —
A other vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID…
-
Unscored —
A remote code execution vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1…
-
Unscored —
A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, …
-
Unscored —
In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2_pic_width_in_luma_samples v…
-
Unscored —
In XBLRamDump mode, there is a debug feature that can be used to dump memory contents, if an attacker has physical acce…
-
Unscored —
In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an un…
-
Unscored —
In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak. This could lead to rem…
-
Unscored —
In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader lock. This could lead …
-
Unscored —CVE-2017-13236 Public exploit
In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to lo…
-
Unscored —
A information disclosure vulnerability in the Android media framework (libstagefright_soft_avcenc). Product: Android. V…
-
Unscored —
In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of…
-
Unscored —
A information disclosure vulnerability in the Android system (ui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, …
-
Unscored —
A information disclosure vulnerability in the Android framework (ui framework). Product: Android. Versions: 8.0. ID: A-…
-
Unscored —
In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL term…
-
Unscored —
A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kerne…
-
Unscored —
A elevation of privilege vulnerability in the Upstream kernel easel. Product: Android. Versions: Android kernel. ID: A-…
-
Unscored —
A information disclosure vulnerability in the Android framework (crypto framework). Product: Android. Versions: 8.0, 8.…
-
Unscored —
The cbstream.sys driver in Carbon Black 5.1.1.60603 allows local users with admin privileges to cause a denial of servi…
-
Unscored —
cb.exe in Carbon Black 5.1.1.60603 allows attackers to cause a denial of service (out-of-bounds read, invalid pointer d…