Archive
10 July 2018
Vulnerabilities first published on this day (UTC), newest first.
87 results · Feed
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5G_ent_d…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FD_sec…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out-of-bounds read in the function H5VM_memcpyvv in…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5FL_blk_…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a buffer over-read in H5O_chunk_deserialize in H5Ocach…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer over-read in the function H5F_add…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_fill…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read …
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5O_link_de…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FD_sec…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_link…
-
Unscored —
Installation tool IPDT (Intel Processor Diagnostic Tool) 4.1.0.24 sets permissions of installed files incorrectly, allo…
-
Unscored —
Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x /…
-
Unscored —
Unquoted service paths in Intel Quartus Prime Programmer and Tools in versions 15.1 - 18.0 allow a local attacker to po…
-
Unscored —
Unquoted service paths in Intel Processor Diagnostic Tool (IPDT) before version 4.1.0.27 allows a local attacker to pot…
-
Unscored —
Unquoted service paths in Intel Quartus Prime in versions 15.1 - 18.0 allow a local attacker to potentially execute arb…
-
Unscored —
Unquoted service paths in Intel Quartus II in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitr…
-
Unscored —
Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine …
-
Unscored —
Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local …
-
Unscored —
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of…
-
Unscored —
Unquoted service paths in Intel Quartus II Programmer and Tools in versions 11.0 - 15.0 allow a local attacker to poten…
-
Unscored —
Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine…
-
Unscored —
Information disclosure vulnerability in storage media in systems with Intel Optane memory module with Whole Disk Encryp…
-
Unscored —
BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative pri…
-
Unscored —
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3…
-
Unscored —
Platform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel C…
-
High 7.5
js-bson vulnerable to REDoS
The MongoDB bson JavaScript module (also known as js-bson) versions 0.5.0 to 1.0.x before 1.0.5 is vulnerable to a Regular Expression Denial of Service (ReDoS) in lib/bson/decimal128.js. The flaw is triggered when the Decimal128.fromString() function is calle…
-
Unscored —
An issue was discovered in idreamsoft iCMS 7.0.9. XSS exists via the callback parameter in a public/api.php uploadpic r…
-
Medium 4.7
A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_a…
-
Medium 4.8
NetIQ iManager XSS vulnerabilities
NetIQ iManager 3.1.1 addresses potential XSS vulnerabilities.
-
Medium 6.5
A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or …
-
Unscored —CVE-2018-13849 Public exploit
edit_requests.php in yTakkar Instagram-clone through 2018-04-23 has XSS via an onmouseover payload because of an inadeq…
-
Unscored —
The "Firebase Cloud Messaging (FCM) + Advance Admin Panel" component supporting Firebase Push Notification on iOS (thro…
-
Unscored —
An issue has been found in HTSlib 1.8. It is a memory leak in fai_read in faidx.c. NOTE: This has been disputed with th…
-
Unscored —
An issue has been found in HTSlib 1.8. It is a memory leak in bgzf_getline in bgzf.c. NOTE: the software maintainer's p…
-
Unscored —
An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4_StcoAtom::AdjustChunkOffsets in Core/Ap4StcoAtom.cpp.
-
Unscored —
An issue has been found in HTSlib 1.8. It is a buffer over-read in sam_parse1 in sam.c.
-
Unscored —
An issue has been found in Bento4 1.5.1-624. AP4_Mpeg2TsVideoSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp has a hea…
-
Unscored —
An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4_StszAtom::GetSampleSize in Core/Ap4StszAtom.cpp.
-
Low 3.5
Certificate Revocation Check failure
Fixed issues with NetIQ eDirectory prior to 9.1.1 when checking certificate revocation.