Archive
October 2018
Vulnerabilities first published in this month (UTC), newest first.
1,473 results · Feed
-
Unscored —
An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is a DDI-VRT-2018-19 Unau…
-
Unscored —
An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif…
-
Unscored —
There is an out-of-bounds read in fz_run_t3_glyph in fitz/font.c in Artifex MuPDF 1.14.0, as demonstrated by mutool.
-
Unscored —
An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is a DDI-VRT-2018-18 Unau…
-
Unscored —
Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdra…
-
Unscored —
The use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile…
-
Unscored —
Improper access control in core module lead XBL_LOADER performs the ZI region clear for QTEE instead of XBL_SEC in Snap…
-
Unscored —
When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Sn…
-
Unscored —
When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck …
-
Unscored —
A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845,…
-
Unscored —
Lack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon Mobile in version SD …
-
Unscored —
A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206,…
-
Unscored —
Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version …
-
Unscored —
Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdra…
-
Unscored —
Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850
-
Unscored —
Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon A…
-
Unscored —
There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Au…
-
Unscored —
Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using t…
-
Unscored —
While processing logs, data is copied into a buffer pointed to by an untrusted pointer in Snapdragon Mobile, Snapdragon…
-
Unscored —
ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909…
-
Unscored —
During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Autom…
-
Unscored —
A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobil…
-
Unscored —
XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unus…
-
Unscored —
Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon W…
-
Unscored —
The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext. The location…
-
Unscored —
Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email …
-
Unscored —
Crossroads 2.81 does not properly handle the /tmp directory during a build of xr. A local attacker can first create a w…
-
Unscored —
The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users …
-
Unscored —
A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrator…
-
Unscored —
Reliance 4 SCADA/HMI, Version 4.7.3 Update 3 and prior. This vulnerability could allow an unauthorized attacker to inje…
-
Unscored —
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options w…
-
Medium 4.0
An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.A…
-
Critical 9.3
An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Ale…
-
Unscored —
An issue was discovered in Xpdf 4.00. XRef::readXRefStream in XRef.cc allows attackers to launch a denial of service (I…
-
Unscored —
An issue was discovered in Xpdf 4.00. catalog->getNumPages() in AcroForm.cc allows attackers to launch a denial of serv…
-
Unscored —
ServersCheck Monitoring Software through 14.3.3 allows local users to cause a denial of service (menu functionality los…
-
Unscored —
AudioCodes 440HD and 450HD devices 3.1.2.89 and earlier allows man-in-the-middle attackers to obtain sensitive credenti…
-
Unscored —
The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive p…
-
Unscored —
ServersCheck Monitoring Software through 14.3.3 has Persistent and Reflected XSS via the sensors.html status parameter,…
-
Unscored —
A command injection vulnerability in the setup API in the Neato Botvac Connected 2.2.0 allows network attackers to exec…