Archive
18 January 2019
Vulnerabilities first published on this day (UTC), newest first.
123 results · Feed
-
Unscored —
Possible undefined behavior due to lack of size check in function for parameter segment_idx can lead to a read outside …
-
Unscored —
Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of registr…
-
Unscored —
While processing a packet decode request in MQTT, Race condition can occur leading to an out-of-bounds access in snapdr…
-
Unscored —
Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and sn…
-
Unscored —
Improper check while accessing the local memory stack on MQTT connection request can lead to buffer overflow in snapdra…
-
Unscored —
Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, s…
-
Unscored —
Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in sn…
-
High 7.4
DSA-2019-001: Dell Networking OS10 Improper Certificate Validation Vulnerability
Dell Networking OS10 versions prior to 10.4.3.0 contain a vulnerability in the Phone Home feature which does not properly validate the server's certificate authority during TLS handshake. Use of an invalid or malicious certificate could potentially allow an a…
-
Unscored —
Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon mobi…
-
Unscored —
Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wea…
-
Unscored —
Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in v…
-
Unscored —
Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdrag…
-
Unscored —
Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and sna…
-
Unscored —
Improper length check while processing an MQTT message can lead to heap overflow in snapdragon mobile and snapdragon we…
-
Unscored —
Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in s…
-
Unscored —
Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in ve…
-
Unscored —
Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile …
-
Unscored —
AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon …
-
Unscored —
Improper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile and snapdragon wear in…
-
Low —
Spring Integration XML External Entity Injection (XXE)
Spring Integration (spring-integration-xml and spring-integration-ws modules), versions 4.3.18, 5.0.10, 5.1.1, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
-
Low —
Spring Batch XML External Entity Injection (XXE)
Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
-
Critical 9.8
Spring Web Services XML External Entity Injection (XXE)
Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
-
Unscored —
The Upload add-on resource in Atlassian Universal Plugin Manager before version 2.22.14 allows remote attackers who hav…
-
Unscored —
The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture, inco…
-
Unscored —
Premisys Identicard version 3.1.190 database uses default credentials. Users are unable to change the credentials witho…
-
Unscored —
Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryptio…
-
Unscored —
Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi scr…
-
Unscored —
Premisys Identicard version 3.1.190 stores backup files as encrypted zip files. The password to the zip is hard-coded a…
-
Unscored —
Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated re…
-
Unscored —
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…
-
Unscored —
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…
-
Unscored —
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…
-
Unscored —
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…
-
Unscored —
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…
-
Unscored —
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…
-
Unscored —
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…
-
Unscored —
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…
-
Unscored —CVE-2018-16042 EPSS 82%
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…
-
Unscored —
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…
-
Unscored —
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…