Archive
23 August 2018
Vulnerabilities first published on this day (UTC), newest first.
46 results · Feed
-
Critical 9.9
An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH-ETH-250 …
-
High 8.2
An exploitable stack-based buffer overflow vulnerability exists in the database 'find-by-cameraId' functionality of vid…
-
High 8.6
An exploitable HTTP header injection vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 …
-
Critical 9.9
An exploitable buffer overflow vulnerability exists in the samsungWifiScan handler of video-core's HTTP server of Samsu…
-
Critical 9.9
An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung S…
-
Unscored —
The flv_write_packet function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an empty audio packet, l…
-
Medium 6.5
Privilege Escalation in fscrypt
The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary group IDs to the values associated with the root user, which allows attackers to gain privileges via a successful login through certain applications that use Linu…
-
Unscored —
POSIM EVO 15.13 for Windows includes hardcoded database credentials for the "root" database user. "root" access to POSI…
-
Unscored —
AccuPOS 2017.8 is installed with the insecure "Authenticated Users: Modify" permission for files within the installatio…
-
Unscored —
POSIM EVO 15.13 for Windows includes an "Emergency Override" administrative account that may be accessed through POSIM'…
-
Unscored —
Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory exhaustion vulnerability. An authenticated remote …
-
Unscored —CVE-2018-1156 Public exploit
Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to stack buffer overflow through the license upgrade interface…
-
Unscored —
Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a stack exhaustion vulnerability. An authenticated remote a…
-
Unscored —
Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory corruption vulnerability. An authenticated remote …
-
Unscored —
Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 may allow non-administrative users to change executable …
-
Unscored —
Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 allow a specially crafted DLL file to be placed in the s…
-
Unscored —
Becton, Dickinson and Company (BD) Alaris Plus medical syringe pumps (models Alaris GS, Alaris GH, Alaris CC, and Alari…
-
Unscored —
curl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server.
-
Medium 4.3
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
A exposure of sensitive information vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in Computer.java that allows attackers With Overall/Read permission to access the connection log for any agent.
-
Medium 5.3
Deserialization of Untrusted Data in Jenkins
A vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in XStream2.java that allows attackers to have Jenkins resolve a domain name when deserializing an instance of java.net.URL.
-
Medium 6.5
Infinite Loop in Jenkins Core
A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop.
-
Medium 5.4
Improper Authentication in Jenkins
A improper authentication vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in SecurityRealm.java, TokenBasedRememberMeServices2.java that allows attackers with a valid cookie to remain logged in even if that feature is disabled.
-
High 7.5
Missing Release of Resource after Effective Lifetime in Jenkins
A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in BasicAuthenticationFilter.java, BasicHeaderApiTokenAuthenticator.java that allows attackers to create ephemeral in-memory user records by attempting to log in using …
-
Medium 6.5
Incorrect Authorization in Jenkins
A improper authorization vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in UpdateCenter.java that allows attackers to cancel a Jenkins restart scheduled through the update center.
-
High 7.5
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extract…
-
Unscored —
An issue was discovered in the MapR File System in MapR Converged Data Platform and MapR-XD 6.x and earlier. Under cert…
-
High 8.5
An exploitable buffer overflow vulnerability exists in the PubNub message handler for the "control" channel of Insteon …
-
High 8.8
An exploitable JSON injection vulnerability exists in the credentials handler of video-core's HTTP server of Samsung Sm…
-
High 7.5
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extract…
-
High 7.5
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in video-core's HTT…
-
Critical 9.9
An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-c…
-
Critical 9.9
Multiple exploitable buffer overflow vulnerabilities exist in the credentials handler of video-core's HTTP server of Sa…
-
High 8.5
An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server …
-
Critical 9.9
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extrac…
-
High 8.5
An exploitable buffer overflow vulnerability exists in the camera "create" feature of video-core's HTTP server of Samsu…
-
Critical 9.9
An exploitable buffer overflow vulnerability exists in the camera "replace" feature of video-core's HTTP server of Sams…
-
Critical 9.9
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extrac…
-
High 8.8
Apache Sentry may allow attacker to access/remove data from Sentry protected table
An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without being authorized by Apache Sentry before 2.0.1. This can allow an attacker unauthorized access to the partitioned data of a Sentry protected table and can allow an attacker to remove da…
-
Unscored —
On Dell 2335dn printers with Printer Firmware Version 2.70.05.02, Engine Firmware Version 1.10.65, and Network Firmware…
-
High 8.5
On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted commands sent through the PubNub service …