Archive
October 2018
Vulnerabilities first published in this month (UTC), newest first.
1,473 results · Feed
-
Unscored —
When dynamic memory allocation fails, currently the process sleeps for one second and continues with infinite loop with…
-
Unscored —
Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version Q…
-
Unscored —
Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Sn…
-
Unscored —
Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small…
-
Unscored —
While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size …
-
Unscored —
Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdra…
-
Unscored —
Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mob…
-
Unscored —
While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due t…
-
Unscored —
When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can…
-
Unscored —
Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, …
-
Unscored —
In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting …
-
Unscored —
While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in S…
-
Unscored —
Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory co…
-
Unscored —
Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, …
-
Unscored —
XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdr…
-
Unscored —
BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash.
-
Unscored —
chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against …
-
Unscored —
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too smal…
-
Unscored —
chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second…
-
Unscored —
An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c …
-
Unscored —
An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer over-read in internalPrintf in miniz/lup…
-
Unscored —
An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c …
-
Unscored —
Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/pm.php folder parameter.
-
Unscored —
DedeCMS 5.7 SP2 allows XSS via the plus/qrcode.php type parameter.
-
Unscored —
Lack of an authentication mechanism in KERUI Wifi Endoscope Camera (YPC99) allows an attacker to watch or block the cam…
-
Unscored —
Missing authentication and improper input validation in KERUI Wifi Endoscope Camera (YPC99) allow an attacker to execut…
-
Unscored —
Symantec Web Isolation (WI) 1.11 prior to 1.11.21 is susceptible to a reflected cross-site scripting (XSS) vulnerabilit…
-
Unscored —CVE-2018-15704 EPSS 22%
Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated atta…
-
Unscored —
Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site scripting vulnerabilities. A remote …
-
Unscored —
LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.…
-
Unscored —
In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt…
-
High 8.8
IBM Security Access Manager Appliance 9.0.3.1, 9.0.4.0 and 9.0.5.0 could allow unauthorized administration operations w…
-
Unscored —
Leanote 2.6.1 has XSS via the Blog Basic Setting title field, which is mishandled during rendering of the "likes" page.
-
Unscored —
ServersCheck Monitoring Software before 14.3.4 allows SQL Injection by an authenticated user.
-
Unscored —
There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function Proc…
-
Unscored —
Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter.
-
Critical 9.8
ThinkPHP SQLi Vulnerability
ThinkPHP 3.2.4 has SQL Injection via the order parameter because the Library/Think/Db/Driver.class.php parseOrder function mishandles the key variable.
-
Unscored —
In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connecti…
-
Unscored —
TeaKKi 2.7 allows XSS via a crafted onerror attribute for a picture's URL.
-
High 8.8
Zenario CMS vulnerable to CSRF
Cross-Site Request Forgery (CSRF) vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenario__content%2Fpanels%2Fcontent URI.