Archive
12 June 2018
Vulnerabilities first published on this day (UTC), newest first.
56 results · Feed
-
Unscored —
Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 (as well as in RTsoft's Dink Smallwood HD / Proto…
-
Unscored —
In the KGSL driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux …
-
Unscored —
improper validation of array index in WiFi driver function sapInterferenceRssiCount() leads to array out-of-bounds acce…
-
Unscored —
In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux …
-
Unscored —
In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux …
-
Unscored —
While processing a DSP buffer in an audio driver's event handler, an index of a buffer is not checked before accessing …
-
Unscored —
Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android relea…
-
Unscored —
Early or late retirement of rotation requests can result in a Use After Free condition in all Android releases from CAF…
-
Unscored —
An arbitrary address write can occur if a compromised WLAN firmware sends incorrect data to WLAN driver in all Android …
-
Unscored —
In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a resul…
-
Unscored —
In the video driver function set_output_buffers(), binfo can be accessed after being freed in a failure scenario in all…
-
Unscored —
In the function wma_pdev_div_info_evt_handler() in all Android releases from CAF (Android for MSM, Firefox OS for MSM, …
-
Unscored —
Buffer over flow can occur while processing a HTT_T2H_MSG_TYPE_TX_COMPL_IND message with an out-of-range num_msdus valu…
-
Unscored —
Due to a race condition in the QTEECOM driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QR…
-
Unscored —
In wma_ndp_end_response_event_handler(), the variable len_end_rsp is a uint32 which can be overflowed if the value of v…
-
Unscored —
Buffer might get used after it gets freed due to unlocking the mutex before freeing the buffer in all Android releases …
-
Unscored —
The value of fix_param->num_chans is received from firmware and if it is too large, an integer overflow can occur in wm…
-
Unscored —
In the camera driver, an out-of-bounds access can occur due to an error in copying region params from user space in all…
-
Unscored —
Due to a race condition in a bus driver, a double free in msm_bus_floor_vote_context() can potentially occur in all And…
-
Unscored —
An issue was discovered on Momentum Axel 720P 5.1.8 devices. There is Authenticated Custom Firmware Upgrade via DNS Hij…
-
Unscored —
An issue was discovered on Momentum Axel 720P 5.1.8 devices. Custom Firmware Upgrade is possible via an SD Card. With p…
-
Unscored —
An issue was discovered on Momentum Axel 720P 5.1.8 devices. Root access can be obtained via UART pins without any rest…
-
Unscored —
An issue was discovered on Momentum Axel 720P 5.1.8 devices. All processes run as root.
-
Unscored —
An issue was discovered on Momentum Axel 720P 5.1.8 devices. The root password can be obtained in cleartext by issuing …
-
Unscored —
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter.
-
Unscored —
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sort_direction param…
-
Unscored —
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST user_search paramet…
-
Unscored —
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET type parameter.
-
Unscored —
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter.
-
Unscored —
The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attacker…
-
Unscored —CVE-2018-12254 Public exploit
router.php in the Harmis Ek rishta (aka ek-rishta) 2.10 component for Joomla! allows SQL Injection via the PATH_INFO to…
-
Unscored —
A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to use a specially crafted URL to elev…
-
Unscored —CVE-2018-10507 Public exploit
A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or…
-
Unscored —
A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to exploit it via a Browser Refresh at…
-
Unscored —
Little Snitch versions 4.0 to 4.0.6 use the SecStaticCodeCheckValidityWithErrors() function without the kSecCSCheckAllA…
-
Unscored —CVE-2018-5803 Public exploit
In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_c…
-
Unscored —
In the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and 4.4.133, multiple race condition errors when handling…
-
Unscored —
Improper restriction of write operations within the bounds of a memory buffer in snscore.sys in SoftControl/SafenSoft S…
-
High 7.3
shell code injection via ESSID because of missing escaping of a variable
Missing escaping of ESSID values in sysconfig of SUSE Linux Enterprise allows attackers controlling an access point to cause execute arbitrary code. Affected releases are sysconfig prior to 0.83.7-2.1.
-
Medium 6.1
Openshift Enterprise source-to-image vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip)
Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An attacker who could trick a user into using the command to copy files locally, from a pod, could override files outside of the target directory…