Archive
November 2018
Vulnerabilities first published in this month (UTC), newest first.
986 results · Feed
-
Unscored —
PRIMX ZoneCentral before 6.1.2236 on Windows sometimes leaks the plaintext of NTFS files. On non-SSD devices, this is l…
-
Unscored —
All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an unauthenticated attacker to …
-
Unscored —
Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.
-
Unscored —CVE-2018-15709 EPSS 21%
Nagios XI 5.5.6 allows remote authenticated attackers to execute arbitrary commands via a crafted HTTP request.
-
Unscored —CVE-2018-15712 EPSS 49%
Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in a…
-
Unscored —
Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the oname and oname2 pa…
-
Unscored —
Nagios XI 5.5.6 allows persistent cross site scripting from remote authenticated attackers via the stored email address…
-
Unscored —CVE-2018-15711 EPSS 36%
Nagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more privileged users. The…
-
Unscored —
Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP …
-
Unscored —
In ixheaacd_extract_frame_info_ld of ixheaacd_env_extr.c there is a possible out of bounds write due to a missing bound…
-
Unscored —
In ixheaacd_mps_getstridemap of ixheaacd_mps_parse.c there is a possible out of bounds write due to a missing bounds ch…
-
Unscored —
In avrc_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This …
-
Unscored —
In onCheckedChanged of BluetoothPairingController.java, there is a possible way to retrieve contact information due to …
-
Unscored —
In avrc_pars_vendor_rsp of avcr_pars_ct.cc, there is a possible out-of-bounds read due to a missing bounds check. This …
-
Unscored —
In the serialization functions of StatsLogEventWrapper.java, there is a possible out-of-bounds write due to unnecessary…
-
Unscored —
In ixheaacd_dec_data_init of ixheaacd_create.c there is a possible out of write read due to a missing bounds check. Thi…
-
Unscored —
In device configuration data, there is an improperly configured setting. This could lead to remote disclosure of device…
-
Unscored —
In BTA_HdRegisterApp of bta_hd_api.cc, there is a possible out-of-bound write due to a missing bounds check. This could…
-
Unscored —
In trim_device of f2fs_format_utils.c, it is possible that the data partition is not wiped during a factory reset. This…
-
Unscored —
In register_app of btif_hd.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to…
-
Unscored —
In AudioSpecificConfig_Parse of tpdec_asc.cpp, there is a possible out-of-bounds write due to a missing bounds check. T…
-
Unscored —
In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.c, there is a possible out of bounds read due to a missing bounds check. T…
-
Unscored —
In ixheaacd_individual_ch_stream of ixheaacd_channel.c there is a possible out of bounds write due to a missing bounds …
-
Unscored —CVE-2018-9539 Public exploit
In the ClearKey CAS descrambler, there is a possible use after free due to a race condition. This could lead to local e…
-
Unscored —
In the AndroidManifest.xml file defining the SliceBroadcastReceiver handler for com.android.settings.slice.action.WIFI_…
-
Unscored —
In numerous functions of libFDK, there are possible out of bounds writes due to incorrect bounds checks. This could lea…
-
Unscored —
In parseMPEGCCData of NuPlayer2CCDecoder.cpp, there is a possible out of bounds write due to an incorrect bounds check.…
-
Unscored —
In Parcel.writeMapInternal of Parcel.java, there is a possible parcel serialization/deserialization mismatch due to imp…
-
Unscored —
In vorbis_book_decodev_set of codebook.c there is a possible out of bounds write due to missing bounds check. This coul…
-
Unscored —
In function SMF_ParseMetaEvent of file eas_smf.c there is incorrect input validation causing an infinite loop. This cou…
-
Unscored —
In ixheaacd_over_lap_add1_armv8 of ixheaacd_overlap_add1.s there is a possible out of bounds write due to a missing bou…
-
Unscored —
In ixheaacd_reset_acelp_data_fix of ixheaacd_lpc.c there is a possible out of bounds write due to a missing bounds chec…
-
Unscored —
In ixheaacd_tns_ar_filter_dec of ixheaacd_aac_tns.c there is a possible out of bounds write due to a missing bounds che…
-
Unscored —
A Elevation of privilege vulnerability in the HTC bootloader. Product: Android. Versions: Android kernel. Android ID: A…
-
Unscored —
In CAacDecoder_DecodeFrame of aacdecode.cpp, there is a possible out-of-bounds write due to a missing bounds check. Thi…
-
Unscored —
In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This …
-
Medium 6.5
ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper ac…
-
Medium 6.5
ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper ch…
-
Unscored —
Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed a …
-
Unscored —
Incorrect refcounting in AppCache in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform a sandbox…