Archive
July 2018
Vulnerabilities first published in this month (UTC), newest first.
2,170 results · Feed
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Window…
-
Medium 6.5
ChakraCore Security Bypass
A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be bypassed, aka "Scripting Engine Security Feature Bypass Vulnerability." This affects Microsoft Edge, ChakraCore.
-
Unscored —CVE-2018-8274 EPSS 21%
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft …
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5G_ent_d…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FD_sec…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out-of-bounds read in the function H5VM_memcpyvv in…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5FL_blk_…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a buffer over-read in H5O_chunk_deserialize in H5Ocach…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer over-read in the function H5F_add…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_fill…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read …
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5O_link_de…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FD_sec…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_link…
-
Unscored —
Installation tool IPDT (Intel Processor Diagnostic Tool) 4.1.0.24 sets permissions of installed files incorrectly, allo…
-
Unscored —
Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x /…
-
Unscored —
Unquoted service paths in Intel Quartus Prime Programmer and Tools in versions 15.1 - 18.0 allow a local attacker to po…
-
Unscored —
Unquoted service paths in Intel Processor Diagnostic Tool (IPDT) before version 4.1.0.27 allows a local attacker to pot…
-
Unscored —
Unquoted service paths in Intel Quartus Prime in versions 15.1 - 18.0 allow a local attacker to potentially execute arb…
-
Unscored —
Unquoted service paths in Intel Quartus II in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitr…
-
Unscored —
Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine …
-
Unscored —
Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local …
-
Unscored —
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of…
-
Unscored —
Unquoted service paths in Intel Quartus II Programmer and Tools in versions 11.0 - 15.0 allow a local attacker to poten…
-
Unscored —
Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine…
-
Unscored —
Information disclosure vulnerability in storage media in systems with Intel Optane memory module with Whole Disk Encryp…
-
Unscored —
BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative pri…
-
Unscored —
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3…
-
Unscored —
Platform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel C…
-
High 7.5
js-bson vulnerable to REDoS
The MongoDB bson JavaScript module (also known as js-bson) versions 0.5.0 to 1.0.x before 1.0.5 is vulnerable to a Regular Expression Denial of Service (ReDoS) in lib/bson/decimal128.js. The flaw is triggered when the Decimal128.fromString() function is calle…
-
Unscored —
An issue was discovered in idreamsoft iCMS 7.0.9. XSS exists via the callback parameter in a public/api.php uploadpic r…
-
Medium 4.7
A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_a…
-
Medium 4.8
NetIQ iManager XSS vulnerabilities
NetIQ iManager 3.1.1 addresses potential XSS vulnerabilities.
-
Medium 6.5
A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or …
-
Unscored —CVE-2018-13849 Public exploit
edit_requests.php in yTakkar Instagram-clone through 2018-04-23 has XSS via an onmouseover payload because of an inadeq…
-
Unscored —
The "Firebase Cloud Messaging (FCM) + Advance Admin Panel" component supporting Firebase Push Notification on iOS (thro…
-
Unscored —
An issue has been found in HTSlib 1.8. It is a memory leak in fai_read in faidx.c. NOTE: This has been disputed with th…
-
Unscored —
An issue has been found in HTSlib 1.8. It is a memory leak in bgzf_getline in bgzf.c. NOTE: the software maintainer's p…
-
Unscored —
An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4_StcoAtom::AdjustChunkOffsets in Core/Ap4StcoAtom.cpp.
-
Unscored —
An issue has been found in HTSlib 1.8. It is a buffer over-read in sam_parse1 in sam.c.