Archive
15 August 2018
Vulnerabilities first published on this day (UTC), newest first.
109 results · Feed
-
Unscored —
Hi Security Virus Cleaner - Antivirus, Booster, 3.7.1.1329, 2017-09-13, Android application accepts all SSL certificates during SSL communication
Hi Security Virus Cleaner - Antivirus, Booster, 3.7.1.1329, 2017-09-13, Android application accepts all SSL certificates during SSL communication. This opens the application up to a man-in-the-middle attack having all of its encrypted traffic intercepted and …
-
Unscored —
Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption
Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key.
-
Unscored —
DistinctDev, Inc., The Moron Test, 6.3.1, 2017-05-04, iOS application uses a hard-coded key for encryption
DistinctDev, Inc., The Moron Test, 6.3.1, 2017-05-04, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key.
-
Unscored —
Cheetahmobile CM Launcher 3D - Theme, wallpaper, Secure, Efficient, 5.0.3, 2017-09-19, Android application uses a hard-coded key for encryption
Cheetahmobile CM Launcher 3D - Theme, wallpaper, Secure, Efficient, 5.0.3, 2017-09-19, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key.
-
Unscored —
DFNDR Security Antivirus, Anti-hacking & Cleaner, 5.0.9, 2017-11-01, Android application uses a hard-coded key for encryption
DFNDR Security Antivirus, Anti-hacking & Cleaner, 5.0.9, 2017-11-01, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key.
-
Unscored —
Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption
Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key.
-
Unscored —
Musical.ly Inc., musical.ly - your video social network, 6.1.6, 2017-10-03, iOS application uses a hard-coded key for encryption
Musical.ly Inc., musical.ly - your video social network, 6.1.6, 2017-10-03, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key.
-
Unscored —
Uber Technologies, Inc. UberEATS: Uber for Food Delivery, 1.108.10001, 2017-11-02, iOS application uses a hard-coded key for encryption
Uber Technologies, Inc. UberEATS: Uber for Food Delivery, 1.108.10001, 2017-11-02, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key.
-
Unscored —
A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliances could allow …
-
Unscored —
A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote attacker…
-
Unscored —
A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Sma…
-
Unscored —
A vulnerability in the account management subsystem of Cisco Web Security Appliance (WSA) could allow an authenticated,…
-
Unscored —
A vulnerability in the Local Packet Transport Services (LPTS) feature set of Cisco ASR 9000 Series Aggregation Services…
-
Unscored —
A vulnerability in certain attachment detection mechanisms of Cisco Email Security Appliances (ESA) could allow an unau…
-
Unscored —
A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P)…
-
Unscored —
A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Sma…
-
Unscored —
A vulnerability in the web-based management interface of the Cisco Registered Envelope Service could allow an authentic…
-
Unscored —
A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenti…
-
Unscored —
A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to conduct a server-side …
-
Unscored —
A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to manipulate a reverse p…
-
Unscored —
A Directory Traversal Remote Code Execution vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could a…
-
Unscored —
The JMX/RMI interface in Nasdaq BWise 5.0 does not require authentication for an SAP BO Component, which allows remote …
-
Unscored —
The IKEv1 implementation in Clavister cOS Core before 11.00.11, 11.20.xx before 11.20.06, and 12.00.xx before 12.00.09 …
-
Unscored —
ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange (IKE) handshake impl…
-
Unscored —
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Co…
-
Unscored —
An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the …
-
Unscored —CVE-2018-14007 EPSS 47%
Citrix XenServer 7.1 and newer allows Directory Traversal.
-
Unscored —
A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the foll…
-
Unscored —CVE-2018-0952 Public exploit
An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrar…
-
Unscored —
An integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin Red (BTCR), an Ethereu…
-
Unscored —
The maxRandom function of a smart contract implementation for All For One, an Ethereum gambling game, generates a rando…
-
High 7.5
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8…
-
Unscored —CVE-2018-8350 EPSS 20%
A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory, a…
-
Unscored —
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code in…
-
Unscored —CVE-2018-8344 EPSS 23%
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedde…
-
Unscored —CVE-2018-8397 EPSS 68%
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles object…
-
Unscored —
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obj…
-
High 7.8CVE-2018-8406 Exploited · Ransomware
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obj…
KEV Mar 28, 2022 -
Unscored —
An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly valid…
-
Unscored —
A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoof…