Archive
2 October 2018
Vulnerabilities first published on this day (UTC), newest first.
78 results · Feed
-
High 8.0
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096.…
-
High 8.0
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096.…
-
High 8.0
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1…
-
High 8.0
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096.…
-
High 8.0
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096.…
-
High 8.0
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096.…
-
High 8.0
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096.…
-
High 8.0
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1…
-
Unscored —
Entes EMG12 versions 2.57 and prior an information exposure through query strings vulnerability in the web interface ha…
-
Unscored —
Entes EMG12 versions 2.57 and prior The application uses a web interface where it is possible for an attacker to bypass…
-
Unscored —
A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15…
-
Unscored —
Previous releases of the Puppet cisco_ios module did not validate a host's identity before starting a SSH connection. A…
-
Unscored —
Previous releases of the Puppet device_manager module creates configuration files containing credentials that are world…
-
Unscored —
Previous releases of the Puppet cisco_ios module output SSH session debug information including login credentials to a …
-
Unscored —
In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds write due to an incorrect bounds check. Thi…
-
Unscored —
In getOffsetForHorizontal of Layout.java, there is a possible application hang due to a slow width calculation. This co…
-
Unscored —
In ihevcd_parse_sei_payload of ihevcd_parse_headers.c, there is a possible out-of-bounds write due to an integer overfl…
-
Unscored —
In ipSecSetEncapSocketOwner of XfrmController.cpp, there is a possible failure to initialize a security feature due to …
-
Unscored —
In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion. This could…
-
Unscored —
In smp_proc_master_id of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could l…
-
Unscored —
In sdcardfs_open of file.c, there is a possible Use After Free due to an unusual root cause. This could lead to local e…
-
Unscored —
In mca_ccb_hdl_req of mca_cact.cc, there is a possible out of bounds read due to a missing bounds check. This could lea…
-
Unscored —
In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could le…
-
Unscored —
In AMediaCodecCryptoInfo_new of NdkMediaCodec.cpp, there is a possible out-of-bounds write due to an integer overflow. …
-
Unscored —
In the SetupWizard, there is a possible Factory Reset Protection bypass due to a permissions bypass. This could lead to…
-
Unscored —CVE-2018-9493 Public exploit
In the content provider of the download manager, there is a possible SQL injection due to improper input validation. Th…
-
Unscored —
In bta_av_proc_meta_cmd of bta_av_act.cc, there is a possible out of bounds read due to an incorrect bounds check. This…
-
Unscored —
In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out-of-bounds read due to a missing bounds check. Th…
-
Unscored —
In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv_av8 of impeg2_format_conv.s there is a possible out of bounds write due to mi…
-
Unscored —
In readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data. This could lead to local info…
-
Unscored —
In ixheaacd_real_synth_fft_p3 of ixheaacd_esbr_fft.c there is a possible out of bounds write due to a missing bounds ch…
-
Unscored —
In smp_process_keypress_notification of smp_act.cc, there is a possible out of bounds read due to an incorrect bounds c…
-
Unscored —
In smp_proc_enc_info of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could le…
-
Unscored —
In SkSampler::Fill of SkSampler.cpp, there is a possible out of bounds write due to an integer overflow. This could lea…
-
Unscored —
In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out of bounds read due to a missing bounds check. Th…
-
Unscored —
In copy_process of fork.c, there is possible memory corruption due to a double free. This could lead to local escalatio…
-
Unscored —
In checkGrantUriPermissionLocked of ActivityManagerService.java, there is a possible permissions bypass. This could lea…
-
Unscored —CVE-2018-9515 Public exploit
In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to improper locking. This c…
-
Unscored —
In avrc_msg_cback of avrc_api.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead …
-
Medium 4.9
Django allows unprivileged users to read the password hashes of arbitrary accounts
An issue was discovered in Django 2.1 before 2.1.2, in which unprivileged users can read the password hashes of arbitrary accounts. The read-only password widget used by the Django Admin to display an obfuscated password hash was bypassed if a user has only t…