Archive
6 November 2018
Vulnerabilities first published on this day (UTC), newest first.
47 results · Feed
-
Critical 9.8
Richfaces vulnerable to arbitrary code execution
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4…
KEV Sep 28, 2023 -
High 7.2
Improper Restriction of XML External Entity Reference in org.apache.syncope:syncope-core
An administrator with workflow definition entitlements can use DTD to perform malicious operations, including but not limited to file read, file write, and code execution.
-
High 7.5
Path Traversal in knightjs
A Path Traversal in Knightjs versions <= 0.0.1 allows an attacker to read content of arbitrary files on a remote server.
-
Medium 5.3
Path Traversal in takeapeek
A path traversal in takeapeek module versions <=0.2.2 allows an attacker to list directory and files.
-
Medium 6.1
Stored Cross-Site Scripting in tianma-static
A stored xss in tianma-static module versions <=1.0.4 allows an attacker to execute arbitrary javascript.
-
Medium 5.4
Improper Control of Interaction Frequency in Apache syncope-core
A malicious user with enough administration entitlements can inject html-like elements containing JavaScript statements into Connector names, Report names, AnyTypeClass keys and Policy descriptions. When another user with enough administration entitlements ed…
-
Unscored —
In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to memory corruption. This…
-
Unscored —
In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds ch…
-
Unscored —
In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could l…
-
Unscored —
In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could l…
-
Unscored —CVE-2018-9445 Public exploit
In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local…
-
Unscored —
In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing bounds check. This…
-
Unscored —
In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could l…
-
Unscored —
In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This coul…
-
Unscored —
In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote…
-
Unscored —CVE-2018-9488 Public exploit
In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lea…
-
Unscored —
In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. Th…
-
Unscored —
In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to rem…
-
Unscored —
In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of …
-
Unscored —
In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could…
-
Unscored —
In avdt_msg_prs_cfg of avdt_msg.cc, there is a possible out of bounds read due to a missing bounds check. This could le…
-
Unscored —
When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including…
-
Unscored —
In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds ch…
-
Unscored —
In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with n…
-
Unscored —
In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This coul…
-
Unscored —
In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. Thi…
-
Unscored —
In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input val…
-
Unscored —
When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. Th…
-
Unscored —
In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresse…
-
Unscored —
In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead…
-
Unscored —
In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…
-
Unscored —
In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This…
-
Unscored —
In task_get_unused_fd_flags of binder.c, there is a possible memory corruption due to a use after free. This could lead…
-
Unscored —
In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead…
-
Unscored —
In Attachment of Attachment.java and getFilePath of EmlAttachmentProvider.java, there is a possible Elevation of Privil…
-
Unscored —
In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…
-
Unscored —
In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. Th…
-
Unscored —
Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices allows remote attackers to execute arbitrar…
-
Medium 4.3
IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IB…
-
Medium 5.9
IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rati…