Archive
June 2018
Vulnerabilities first published in this month (UTC), newest first.
1,787 results · Feed
-
Unscored —
Buffer might get used after it gets freed due to unlocking the mutex before freeing the buffer in all Android releases …
-
Unscored —
The value of fix_param->num_chans is received from firmware and if it is too large, an integer overflow can occur in wm…
-
Unscored —
In the camera driver, an out-of-bounds access can occur due to an error in copying region params from user space in all…
-
Unscored —
Due to a race condition in a bus driver, a double free in msm_bus_floor_vote_context() can potentially occur in all And…
-
Unscored —
An issue was discovered on Momentum Axel 720P 5.1.8 devices. There is Authenticated Custom Firmware Upgrade via DNS Hij…
-
Unscored —
An issue was discovered on Momentum Axel 720P 5.1.8 devices. Custom Firmware Upgrade is possible via an SD Card. With p…
-
Unscored —
An issue was discovered on Momentum Axel 720P 5.1.8 devices. Root access can be obtained via UART pins without any rest…
-
Unscored —
An issue was discovered on Momentum Axel 720P 5.1.8 devices. All processes run as root.
-
Unscored —
An issue was discovered on Momentum Axel 720P 5.1.8 devices. The root password can be obtained in cleartext by issuing …
-
Unscored —
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter.
-
Unscored —
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sort_direction param…
-
Unscored —
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST user_search paramet…
-
Unscored —
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET type parameter.
-
Unscored —
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter.
-
Unscored —
The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attacker…
-
Unscored —CVE-2018-12254 Public exploit
router.php in the Harmis Ek rishta (aka ek-rishta) 2.10 component for Joomla! allows SQL Injection via the PATH_INFO to…
-
Unscored —
A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to use a specially crafted URL to elev…
-
Unscored —CVE-2018-10507 Public exploit
A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or…
-
Unscored —
A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to exploit it via a Browser Refresh at…
-
Unscored —
Little Snitch versions 4.0 to 4.0.6 use the SecStaticCodeCheckValidityWithErrors() function without the kSecCSCheckAllA…
-
Unscored —CVE-2018-5803 Public exploit
In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_c…
-
Unscored —
In the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and 4.4.133, multiple race condition errors when handling…
-
Unscored —
Improper restriction of write operations within the bounds of a memory buffer in snscore.sys in SoftControl/SafenSoft S…
-
High 7.3
shell code injection via ESSID because of missing escaping of a variable
Missing escaping of ESSID values in sysconfig of SUSE Linux Enterprise allows attackers controlling an access point to cause execute arbitrary code. Affected releases are sysconfig prior to 0.83.7-2.1.
-
Medium 6.1
Openshift Enterprise source-to-image vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip)
Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An attacker who could trick a user into using the command to copy files locally, from a pod, could override files outside of the target directory…
-
Medium 5.3
Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted. …
-
Critical 9.8
SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided Jav…
-
High 8.4
Under certain conditions, SAP Business One, 9.2, 9.3, for SAP HANA backup service allows an attacker to access informat…
-
Unscored —
An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class_real because "class BasicObjec…
-
Unscored —
An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class, related to certain .clone usa…
-
Unscored —
An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OP_ENTER because mrbgems…
-
Medium 5.6
McAfee Network Security Management (NSM) - Password recovery exploitation vulnerability
Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to crack user passwords via unsalted hashes.
-
Medium 5.9
McAfee Network Security Management (NSM) - Exploitation of Authorization vulnerability
Exploitation of Authorization vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to gain elevated privileges via a crafted HTTP request parameter.
-
Unscored —CVE-2018-0732 EPSS 47%
Client DoS due to large DH parameter
During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a …
-
Medium 6.5
routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which …
-
Medium 5.0
ovirt-engine up to version 4.2.3 is vulnerable to an unfiltered password when choosing manual db provisioning. When eng…
-
Unscored —
In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where…
-
Unscored —
In the ea_get function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be trig…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal System (OJS) 3.0.0 to 3.1.1-1 a…
-
Unscored —
An issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk via TCP/TLS, if the clie…