Archive
2 November 2018
Vulnerabilities first published on this day (UTC), newest first.
28 results · Feed
-
High 7.0
An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_c…
-
Unscored —
Dell EMC Integrated Data Protection Appliance Undocumented Accounts Vulnerability
Integrated Data Protection Appliance versions 2.0, 2.1, and 2.2 contain undocumented accounts named 'support' and 'admin' that are protected with default passwords. These accounts have limited privileges and can access certain system files only. A malicious u…
-
Critical 9.0
Pivotal Operations Manager gives all users heightened privileges
Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for privilege escalation. A remote malicious user who has been …
-
Low 3.1
openstack-mistral Discloses the presence of arbitrary files within the filesystem
A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can ta…
-
High 8.2
A Insufficient Verification of Data Authenticity (CWE-345) vulnerability exists in the Modicon M221, all versions, whic…
-
Unscored —
A DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions prior to V2.2.0, which …
-
Medium 5.7
An exploitable firmware downgrade vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.…
-
High 7.5
An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D. A …
-
Critical 9.0
An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D…
-
Critical 9.6
An exploitable firmware downgrade vulnerability exists in the time syncing functionality of Yi Home Camera 27US 1.8.7.0…
-
High 8.3
An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0…
-
High 7.6
An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D…
-
High 8.3
An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0…
-
High 7.6
An exploitable code execution vulnerability exists in the firmware update functionality of the Yi Home Camera 27US 1.8.…
-
Medium 6.2
IBM Robotic Process Automation with Automation Anywhere 11 could under certain cases, display the password in a Control…
-
Medium 5.3
IBM Robotic Process Automation with Automation Anywhere 11 could disclose sensitive information in a web request that c…
-
High 7.1
IBM Rational Engineering Lifecycle Manager 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to a XML External Ent…
-
High 7.1
IBM Daeja ViewONE Professional, Standard & Virtual 5 is vulnerable to a XML External Entity Injection (XXE) attack when…
-
Medium 5.5
IBM Robotic Process Automation with Automation Anywhere 10.0 and 11.0 allows a remote attacker to execute arbitrary cod…
-
Medium 4.1
IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privilege…
-
Medium 6.2
IBM Robotic Process Automation with Automation Anywhere 11 could store highly sensitive information in the form of unen…
-
Unscored —
Circontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored in clear text in a log …
-
Unscored —
Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of …
-
Medium 5.4
IBM Quality Manager (RQM) 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerab…
-
Unscored —
An XXE vulnerability exists in CASE Suite Versions 3.10 and prior when processing parameter entities, which may allow r…
-
Unscored —
InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior t…
-
Unscored —
InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior t…
-
Unscored —
An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, a…