Archive
3 January 2019
Vulnerabilities first published on this day (UTC), newest first.
58 results · Feed
-
Unscored —
Cryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile, snapdragon mobile and snapdra…
-
Unscored —
Possible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon wear in versions MDM96…
-
Unscored —
Cryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon wear in versions MDM920…
-
Unscored —
Use after free in QSH client rule processing in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM…
-
Unscored —
Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile …
-
Unscored —
Buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon automobile, snapdragon mobile…
-
Unscored —
QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and …
-
Unscored —
Cryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear in versions MDM9607, MD…
-
Unscored —
Security keys used by the terminal and NW for a session could be leaked in snapdragon mobile in versions MDM9650, MDM96…
-
Unscored —
When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which will…
-
Unscored —
A non-secure user may be able to access certain registers in snapdragon automobile, snapdragon mobile and snapdragon we…
-
High 7.3
Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration chan…
-
Unscored —
In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused b…
-
Unscored —
The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055…
-
Medium 5.3CVE-2018-18893 Public exploit
Jinjava calls getClass
Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java.
-
Unscored —
Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for re…
-
Unscored —
The Code42 app before 6.8.4, as used in Code42 for Enterprise, on Linux installs with overly permissive permissions on …
-
Unscored —
OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted…