Archive
4 September 2018
Vulnerabilities first published on this day (UTC), newest first.
52 results · Feed
-
Unscored —
In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE-p13, ip fragment reassembly code is vulnerable to a denial…
-
Unscored —
The irda_setsockopt function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel …
-
Unscored —
Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linu…
-
Unscored —
Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148(C432) have a Factory Reset Protection (FRP) …
-
Unscored —
Mate10 Pro Huawei smart phones with the versions before 8.1.0.326(C00) have a FRP bypass vulnerability. During the mobi…
-
Unscored —
P10 Huawei smartphones with the versions before Victoria-AL00AC00B217 have an information leak vulnerability due to the…
-
Unscored —
In Huawei HiRouter-CD20-10 with the versions before 1.9.6 and WS5200-10 with the versions before 1.9.6, there is a plug…
-
Unscored —
In Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel while…
-
High 8.8
A flaw was found in RPC request using gfs2_create_req in glusterfs server. An authenticated attacker could use this fla…
-
Medium 6.5
A flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated attacker could use this fla…
-
Medium 5.3
It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use …
-
High 8.1
A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use…
-
High 8.8
A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point t…
-
High 7.1
A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use this fla…
-
Low 3.5
An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr request via…
-
Medium 6.5
A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values. An attack…
-
High 7.6
It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server nod…
-
Medium 5.5
It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash wh…
-
Unscored —
AttacheCase ver.2.8.4.0 and earlier allows an arbitrary script execution via unspecified vectors.
-
Unscored —
Directory traversal vulnerability in Explzh v.7.58 and earlier allows an attacker to read arbitrary files via unspecifi…
-
Unscored —
Untrusted search path vulnerability in The installer of Digital Paper App version 1.4.0.16050 and earlier allows an att…
-
Unscored —
AttacheCase ver.3.3.0.0 and earlier allows an arbitrary script execution via unspecified vectors.
-
Unscored —
A vulnerability in NoMachine App for Android 5.0.63 and earlier allows attackers to alter environment variables via uns…
-
Unscored —
Cross-site scripting vulnerability in Movable Type versions prior to Ver. 6.3.1 allows remote attackers to inject arbit…
-
High 8.8
It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rp…
-
High 8.8
It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attrib…
-
Medium 5.3
The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is require…
-
Unscored —
An issue was discovered in baigo CMS v2.1.1. There is an index.php?m=article&c=request CSRF that can cause publication …
-
Unscored —
OneThink 1.1.141212 allows CSRF for adding a page via admin.php?s=/Channel/add.html, adding a blog via admin.php?s=/Art…
-
Unscored —
CraftedWeb through 2013-09-24 has reflected XSS via the p parameter.
-
Unscored —
An issue was discovered in SeaCMS 6.61. adm1n/admin_reslib.php has SSRF via the url parameter.
-
Unscored —
An issue was discovered in SeaCMS through 6.61. adm1n/admin_database.php allows remote attackers to delete arbitrary fi…
-
Unscored —
An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admin_topic_vod.…
-
Unscored —
Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF.
-
Unscored —
Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.p…
-
Unscored —
A double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c in OpenSC before 0.19.…
-
Unscored —CVE-2018-16431 Public exploit
admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account.
-
Unscored —
In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.
-
Unscored —
BlueCMS 1.6 allows SQL Injection via the user_name parameter to uploads/user.php?act=index_login.
-
Unscored —
Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c i…