Archive
6 December 2018
Vulnerabilities first published on this day (UTC), newest first.
75 results · Feed
-
Unscored —
In dumpExtractors of IMediaExtractor.cp, there is a possible disclosure of recently accessed media files due to a permi…
-
Unscored —
In readBytes of xltdecwbxml.c, there is a possible out of bounds read due to an integer overflow. This could lead to re…
-
Unscored —
In persist_set_key and other functions of cryptfs.cpp, there is a possible out-of-bounds write due to an uncaught error…
-
Unscored —
In ParsePayloadHeader of payload_metadata.cc, there is a possible out of bounds write due to an integer overflow. This …
-
Unscored —
In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. This coul…
-
Unscored —
In CAacDecoder_Init of aacdecoder.cpp, there is a possible out-of-bound write due to a missing bounds check. This could…
-
Unscored —
In lppTransposer of lpp_tran.cpp there is a possible out of bounds write due to missing bounds check. This could lead t…
-
Unscored —
In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escal…
-
Unscored —
In ihevcd_sao_shift_ctb of ihevcd_sao.c there is a possible out of bounds write due to missing bounds check. This could…
-
Unscored —
In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead t…
-
Unscored —
In process_service_search_rsp of sdp_discovery.c, there is a possible out of bounds read due to a missing bounds check.…
-
Unscored —
In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to a missing bounds check. This could le…
-
Unscored —
In HID_DevAddRecord of hidd_api.cc, there is a possible out-of-bounds write due to a missing bounds check. This could l…
-
Unscored —
In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2_slice_video_decode_accelerator.cc, there is a possible out of bound…
-
Unscored —
In CAacDecoder_Init of aacdecoder.cpp, there is a possible out of bounds write due to a missing bounds check. This coul…
-
Unscored —
In rw_t2t_handle_tlv_detect of rw_t2t_ndef.cc, there is a possible out-of-bounds write due to a missing bounds check. T…
-
Unscored —
On Pixel devices there is a bug causing verified boot to show the same certificate fingerprint despite using different …
-
Unscored —
In bta_ag_do_disc of bta_ag_sdp.cc, there is a possible out-of-bound read due to an incorrect parameter size. This coul…
-
Unscored —
In really_install_package of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This …
-
High 8.8
OS Command Injection in craftercms:crafter-studio
A Server-Side Template Injection issue was discovered in Crafter CMS 3.0.18. Attackers with developer privileges may execute OS commands by Creating/Editing a template file (.ftl filetype) that triggers a call to freemarker.template.utility.Execute in the Fre…
-
Unscored —
ThinkCMF X2.2.2 has SQL Injection via the function _listorders() in AdminbaseController.class.php and is exploitable wi…
-
Unscored —
ThinkCMF X2.2.2 has SQL Injection via the function delete() in SlideController.class.php and is exploitable with the ma…
-
Unscored —
ThinkCMF X2.2.2 has SQL Injection via the method edit_post in ArticleController.class.php and is exploitable by normal …
-
Unscored —
ThinkCMF X2.2.2 has SQL Injection via the functions check() and delete() in CommentadminController.class.php and is exp…
-
Unscored —
ThinkCMF X2.2.2 has SQL Injection via the function edit_post() in NavController.class.php and is exploitable with the m…
-
Unscored —CVE-2018-19892 Scanner template
DomainMOD through 4.11.01 has XSS via the admin/dw/add-server.php DisplayName, HostName, or UserName field.
-
Unscored —
SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string.
-
Unscored —
An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Au…
-
Unscored —
An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Au…
-
Unscored —
An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Au…
-
Unscored —
An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Au…
-
Unscored —
In Artifex MuPDF 1.14.0, svg/svg-run.c allows remote attackers to cause a denial of service (recursive calls followed b…
-
Unscored —
An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Au…
-
Unscored —
In Artifex MuPDF 1.14.0, the svg_run_image function in svg/svg-run.c allows remote attackers to cause a denial of servi…
-
Unscored —
An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Au…