Archive
26 October 2018
Vulnerabilities first published on this day (UTC), newest first.
37 results · Feed
-
Unscored —
admin/index.php?id=filesmanager in Monstra CMS 3.0.4 allows remote authenticated administrators to trigger stored XSS v…
-
Unscored —
In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesyste…
-
High 7.3
A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV (matroska) file format. A s…
-
Unscored —
The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which th…
-
High 7.8CVE-2018-15687 Public exploit
systemd: chown_one() can dereference symlinks
A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files. Affected releases are systemd versions up to and including 239.
-
High 7.0CVE-2018-15686 Public exploit
systemd: reexec state injection: fgets() on overlong lines leads to line splitting
A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected relea…
-
High 8.8
Out-of-Bounds write in systemd-networkd dhcpv6 option handling
A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.
-
Unscored —
An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is a DDI-VRT-2018-21 Refl…
-
Unscored —
An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is a DDI-VRT-2018-20 Unau…
-
Unscored —
An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is a DDI-VRT-2018-19 Unau…
-
Unscored —
An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif…
-
Unscored —
There is an out-of-bounds read in fz_run_t3_glyph in fitz/font.c in Artifex MuPDF 1.14.0, as demonstrated by mutool.
-
Unscored —
An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is a DDI-VRT-2018-18 Unau…
-
Unscored —
Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdra…
-
Unscored —
The use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile…
-
Unscored —
Improper access control in core module lead XBL_LOADER performs the ZI region clear for QTEE instead of XBL_SEC in Snap…
-
Unscored —
When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Sn…
-
Unscored —
When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck …
-
Unscored —
A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845,…
-
Unscored —
Lack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon Mobile in version SD …
-
Unscored —
A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206,…
-
Unscored —
Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version …
-
Unscored —
Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdra…
-
Unscored —
Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850
-
Unscored —
Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon A…
-
Unscored —
There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Au…
-
Unscored —
Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using t…
-
Unscored —
While processing logs, data is copied into a buffer pointed to by an untrusted pointer in Snapdragon Mobile, Snapdragon…
-
Unscored —
ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909…
-
Unscored —
During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Autom…
-
Unscored —
A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobil…
-
Unscored —
XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unus…
-
Unscored —
Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon W…
-
Unscored —
The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext. The location…
-
Unscored —
Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email …
-
Unscored —
Crossroads 2.81 does not properly handle the /tmp directory during a build of xr. A local attacker can first create a w…
-
Unscored —
The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users …