Archive
6 July 2018
Vulnerabilities first published on this day (UTC), newest first.
96 results · Feed
-
Unscored —
While processing a message from firmware in htt_t2h_msg_handler_fast() in Android releases from CAF using the linux ker…
-
Unscored —
The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdra…
-
Unscored —
If the seq_len is greater then CSR_MAX_RSC_LEN, a buffer overflow in __wlan_hdd_cfg80211_add_key() may occur when copyi…
-
Unscored —
In __wlan_hdd_cfg80211_vendor_scan(), a buffer overwrite can potentially occur in Android releases from CAF using the l…
-
Unscored —
Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permi…
-
Unscored —
In the KGSL driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Androi…
-
Unscored —
In wlan_hdd_cfg80211_set_privacy_ibss() in Android releases from CAF using the linux kernel (Android for MSM, Firefox O…
-
Unscored —
While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF…
-
Unscored —
Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdrag…
-
Unscored —
While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux ke…
-
Unscored —
While processing the HTT_T2H_MSG_TYPE_MGMT_TX_COMPL_IND message, a buffer overflow can potentially occur in Android rel…
-
Unscored —
Due to a race condition in a camera driver ioctl handler in Android releases from CAF using the linux kernel (Android f…
-
Unscored —
While sending the response to a RIL_REQUEST_GET_SMSC_ADDRESS message, a buffer overflow can occur in Snapdragon Automob…
-
Unscored —
While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdr…
-
Unscored —
Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile …
-
Unscored —
If the fdt_totalsize is reported as 0 for the current device tree, it bypasses an error check for a valid device tree i…
-
Unscored —
While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longe…
-
Unscored —
Integer overflow can occur in msm_pcm_adsp_stream_cmd_put() function if the user supplied data "param_length" goes beyo…
-
Unscored —
Buffer over-read may happen in wma_process_utf_event() due to improper buffer length validation before writing into par…
-
Unscored —
In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security …
-
Unscored —
Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android…
-
Unscored —
In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security …
-
Unscored —
Improper Input Validation in Linux io-prefetch in Snapdragon Mobile and Snapdragon Wear, A SQL injection vulnerability …
-
Unscored —
Due to a race condition while processing the power stats debug file to read status, a double free condition can occur i…
-
Unscored —
In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security …
-
Unscored —
While flashing meta image, a buffer over-read may potentially occur when the image size is smaller than the image heade…
-
Unscored —
While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum …
-
Medium 6.3
The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pat…
-
Unscored —CVE-2018-11124 Public exploit
Cross-site scripting (XSS) vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allow…
-
Medium 4.4
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a…
-
High 7.1
IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platfor…
-
Medium 5.4
IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to e…
-
Medium 5.9
IBM API Connect information disclosure
IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using …
-
Medium 6.1
IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to em…
-
Medium 5.4
IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This…
-
Medium 5.4
IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to e…
-
Unscored —CVE-2018-13110 Public exploit
All ADB broadband gateways / routers based on the Epicentro platform are affected by a privilege escalation vulnerabili…
-
Unscored —
An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 …
-
Unscored —CVE-2018-13108 Public exploit
All ADB broadband gateways / routers based on the Epicentro platform are affected by a local root jailbreak vulnerabili…
-
Unscored —CVE-2018-13405 Public exploit
The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an…