Archive
28 November 2018
Vulnerabilities first published on this day (UTC), newest first.
42 results · Feed
-
Unscored —
A vulnerability in the update mechanism of Subaru StarLink Harman head units 2017, 2018, and 2019 may give an attacker …
-
Unscored —
A stack-based buffer overflow vulnerability has been identified in Teledyne DALSA Sherlock Version 7.2.7.4 and prior, w…
-
Unscored —
A Race condition vulnerability in unzip_file in admin/import/class-import-settings.php in the Yoast SEO (wordpress-seo)…
-
Unscored —
admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request Forgery (SSRF) via a what…
-
Low 3.4
In Rapid7 Komand version 0.41.0 and prior, certain endpoints that are able to list the always encrypted-at-rest connect…
-
Critical 9.4
Cisco Prime License Manager SQL Injection Vulnerability
A vulnerability in the web framework code of Cisco Prime License Manager (PLM) could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vulnerability is due to a lack of proper validation of user-supplied input in SQL queries. An …
-
Unscored —
This base theme bridges the gap between Drupal and the Bootstrap Framework. The theme doesn't sufficiently filter valid…
-
Medium 5.4
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra…
-
Unscored —CVE-2018-12121 EPSS 10%
Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: B…
-
Unscored —
Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascri…
-
Unscored —
Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugge…
-
Unscored —CVE-2018-12122 EPSS 41%
Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacke…
-
Unscored —
Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use un…
-
Unscored —
The Python CGI scripts in PWS in Imperva SecureSphere 13.0.10, 13.1.10, and 13.2.10 allow remote attackers to execute a…
-
Unscored —
In FreeBSD before 11.2-STABLE(r340268) and 11.2-RELEASE-p5, due to incorrectly accounting for padding on 64-bit platfor…
-
Unscored —
Buffer Overflow vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.…
-
Unscored —
Improper Authorization vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, Q…
-
Unscored —
Command Injection vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.…
-
Unscored —
NULL Pointer Dereference vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829,…
-
Unscored —
When a malformed command is sent to the device programmer, an out-of-bounds access can occur in Snapdragon Automobile, …
-
Unscored —
Failure condition is not handled properly and the correct error code is not returned. It could cause unintended SUI beh…
-
Unscored —
Possible buffer overflow in Ontario fingerprint code due to lack of input validation for the parameters coming into TZ …
-
Unscored —
SMMU secure camera logic allows secure camera controllers to access HLOS memory during session in Snapdragon Automobile…
-
Unscored —
Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobil…
-
Unscored —
Possible buffer overflow in OEM crypto function due to improper input validation in Snapdragon Automobile, Snapdragon M…
-
Unscored —
Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobil…
-
Unscored —
While loading a service image, an untrusted pointer dereference can occur in Snapdragon Mobile in versions SD 835, SDA6…
-
Unscored —
In the device programmer target-side code for firehose, a string may not be properly NULL terminated can lead to a inco…
-
Unscored —
Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile,…
-
Unscored —
Restrictions related to the modem (sim lock, sim kill) can be bypassed by manipulating the system to issue a deactivati…
-
Unscored —
Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600.
-
Unscored —
Missing validation check on CRL issuer name in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 410/1…
-
Unscored —
Secure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon Automobile, Snapdragon Mob…
-
High 7.4
Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords (to restric…
-
Medium 5.7
Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When config…
-
High 7.5
Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is bui…
-
Medium 6.5
Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the proc…
-
Medium 6.5
Samba from version 4.9.0 and before version 4.9.3 is vulnerable to a NULL pointer de-reference. During the processing o…
-
Medium 6.5
A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNA…
-
Unscored —
cgi_handle_request in uhttpd in OpenWrt through 18.06.1 and LEDE through 17.01 has unauthenticated reflected XSS via th…