Archive
6 July 2018
Vulnerabilities first published on this day (UTC), newest first.
96 results · Feed
-
Unscored —
TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes
TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor to address the vulnerab…
-
Unscored —
TrackR Bravo MAC address can be exposed in close proximity and used to obtain the device ID
The Trackr device ID is constructed of a manufacturer identifier of four zeroes followed by the BLE MAC address in reverse. The MAC address can be obtained by being in close proximity to the Bluetooth device, effectively exposing the device ID. The ID can be …
-
Unscored —
TrackR Bravo is missing authentication for the cloud service and allows querying or sending of GPS data from unauthenticated users
Unauthenticated access to the cloud-based service maintained by TrackR Bravo is allowed for querying or sending GPS data for any Trackr device by using the tracker ID number which can be discovered as described in CVE-2016-6539. Updated apps, version 5.1.6 fo…
-
Unscored —
TrackR Bravo mobile application stores account passwords in cleartext
The TrackR Bravo mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor to address the vulnerabilities in CVE-…
-
Unscored —
Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that lea…
-
Unscored —CVE-2018-13410 Public exploit
Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (inv…
-
Unscored —
In a firmware memory dump feature in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS …
-
Unscored —
In the cpuidle driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linu…
-
Unscored —
An integer overflow to buffer overflow vulnerability exists in the ADSPRPC heap manager in all Android releases(Android…
-
Unscored —CVE-2018-3608 Public exploit
A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH…
-
Unscored —
A race condition exists in a driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox O…
-
Unscored —
A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel (Andr…
-
Unscored —
In __wlan_hdd_cfg80211_vendor_scan() in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox …
-
Unscored —
Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that lea…
-
Unscored —
In the audio debugfs in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD …
-
Unscored —
While padding or shrinking a nested wmi packet in all Android releases from CAF using the Linux kernel (Android for MSM…
-
Unscored —
While parsing over-the-air information elements in all Android releases from CAF using the Linux kernel (Android for MS…
-
Unscored —
While processing a debug log event from firmware in all Android releases from CAF using the Linux kernel (Android for M…
-
Unscored —
While processing a WMI_APFIND event in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox O…
-
Unscored —CVE-2018-5873 Public exploit
An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condi…
-
Unscored —
Due to a race condition in the MDSS MDP driver in all Android releases from CAF using the Linux kernel (Android for MSM…
-
Unscored —
Lack of copy_from_user and information leak in function "msm_ois_subdev_do_ioctl, file msm_ois.c can lead to a camera c…
-
Unscored —
Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secur…
-
Unscored —
In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in ve…
-
Unscored —
Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From …
-
Unscored —
An issue was discovered in Jirafeau before 3.4.1. The "search file by link" form is affected by reflected XSS that coul…
-
Unscored —
A CSRF issue was discovered in Jirafeau before 3.4.1. The "delete file" feature on the admin panel is not protected aga…
-
Unscored —
An issue was discovered in Jirafeau before 3.4.1. The "search file by hash" form is affected by reflected XSS that coul…
-
Unscored —
In the FastRPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD And…
-
Unscored —
In the ADSP RPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD An…
-
Unscored —
A buffer over-read can occur during a fast initial link setup (FILS) connection in Android releases from CAF using the …
-
Unscored —
While processing fragments, when the fragment count becomes very large, an integer overflow leading to a buffer overflo…
-
Unscored —
In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security …
-
Unscored —
While processing the system path, an out of bounds access can occur in Android releases from CAF using the linux kernel…
-
Unscored —
While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdra…
-
Unscored —
While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
-
Unscored —
In wma_nan_rsp_event_handler() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM…
-
Unscored —
While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snap…
-
Unscored —
While reading the data from buffer in dci_process_ctrl_status() there can be buffer over-read problem if the len is not…
-
Unscored —
While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in …