Archive
7 August 2018
Vulnerabilities first published on this day (UTC), newest first.
12 results · Feed
-
High 8.0
Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange
Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Android versions before the 2018-06-05 patch may not sufficiently validate elliptic curve parameters used to generate public …
-
Unscored —
The pcpu_embed_first_chunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sen…
-
Unscored —
The swiotlb_print_info function in lib/swiotlb.c in the Linux kernel through 4.14.14 allows local users to obtain sensi…
-
Unscored —
A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4). An attacker with network …
-
Unscored —
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions),…
-
Unscored —
A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manage…
-
Unscored —
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions),…
-
Unscored —
The randMod() function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random val…
-
Unscored —
An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, an…
-
Unscored —
ThinkSAAS through 2018-07-25 has XSS via the index.php?app=group&ac=create&ts=do groupdesc parameter.
-
Medium 5.4
IBM Rhapsody Model Manager 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…
-
Unscored —
ThinkSAAS through 2018-07-25 has XSS via the index.php?app=article&ac=comment&ts=do content parameter.