Archive
23 August 2018
Vulnerabilities first published on this day (UTC), newest first.
17 results · Clear filters · Feed
-
High 8.2
An exploitable stack-based buffer overflow vulnerability exists in the database 'find-by-cameraId' functionality of vid…
-
High 8.6
An exploitable HTTP header injection vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 …
-
High 7.5
Missing Release of Resource after Effective Lifetime in Jenkins
A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in BasicAuthenticationFilter.java, BasicHeaderApiTokenAuthenticator.java that allows attackers to create ephemeral in-memory user records by attempting to log in using …
-
High 7.5
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extract…
-
High 8.5
An exploitable buffer overflow vulnerability exists in the PubNub message handler for the "control" channel of Insteon …
-
High 8.8
An exploitable JSON injection vulnerability exists in the credentials handler of video-core's HTTP server of Samsung Sm…
-
High 7.5
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extract…
-
High 7.5
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in video-core's HTT…
-
High 8.5
An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server …
-
High 8.5
An exploitable buffer overflow vulnerability exists in the camera "create" feature of video-core's HTTP server of Samsu…
-
High 8.8
Apache Sentry may allow attacker to access/remove data from Sentry protected table
An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without being authorized by Apache Sentry before 2.0.1. This can allow an attacker unauthorized access to the partitioned data of a Sentry protected table and can allow an attacker to remove da…
-
High 8.5
On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted commands sent through the PubNub service …
-
High 8.5
On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service …
-
High 8.5
On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service …
-
High 8.6
An exploitable firmware downgrade vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgra…
-
High 7.5
An exploitable denial of service vulnerability exists in Insteon Hub running firmware version 1012. Leftover demo funct…
-
High 8.1
Electron webPreferences vulnerability can be used to perform remote code execution
GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a WebPreferences vulnerability that can be leveraged to perform remote code executio…