Archive
25 February 2019
Vulnerabilities first published on this day (UTC), newest first.
55 results · Feed
-
Unscored —
Improper input validation in wireless service messaging module for data received from broadcast messages can lead to he…
-
Unscored —
Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute…
-
Unscored —
Exceeding the limit of usage entries are not tracked and the information will be lost causing the content to lose conti…
-
Unscored —
Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapd…
-
Unscored —
Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdr…
-
Unscored —
Improper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto, Snapdragon Compute, Snapdragon…
-
Unscored —
Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a b…
-
Unscored —
Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues …
-
Unscored —
Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snap…
-
Unscored —
Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapd…
-
Unscored —
Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdra…
-
Unscored —
KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto…
-
Unscored —
Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdrago…
-
Unscored —
Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, …
-
Unscored —
Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connect…
-
Unscored —
Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Sn…
-
Unscored —
Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Sn…
-
Unscored —
An issue was discovered in Gurock TestRail 5.6.0.3853. An "Unrestricted Upload of File" vulnerability exists in the ima…
-
Unscored —
The Scripting and AutoUpdate functionality in Cordaware bestinformed Microsoft Windows client versions before 6.2.1.0 a…
-
Unscored —
Cordaware bestinformed Microsoft Windows client before 6.2.1.0 is affected by insecure SSL certificate verification and…
-
Unscored —CVE-2019-9162 Public exploit
In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient…
-
Unscored —
A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and …
-
Unscored —
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5MM_xstrdup in …
-
Unscored —
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5VM_memcpyvv in…
-
High 7.3
Cisco Webex Teams for iOS Arbitrary File Upload Vulnerability
A vulnerability in the client application for iOS of Cisco Webex Teams could allow an authenticated, remote attacker to upload arbitrary files within the scope of the iOS application. The vulnerability is due to improper input validation in the client applica…
-
Unscored —
Jamf Self Service 10.9.0 allows man-in-the-middle attackers to obtain a root shell by leveraging the "publish Bash shel…
-
Medium 6.5
Cisco SPA112, SPA525, and SPA5x5 Series IP Phones Certificate Validation Vulnerability
A vulnerability in the certificate handling component of the Cisco SPA112, SPA525, and SPA5X5 Series IP Phones could allow an unauthenticated, remote attacker to listen to or control some aspects of a Transport Level Security (TLS)-encrypted Session Initiatio…
-
Unscored —
An issue was discovered in Hsycms V1.1. There is an XSS vulnerability via the name field to the /book page.
-
Medium 6.1
Moderate severity vulnerability that affects org.b3log:symphony
An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java.
-
Unscored —
An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file imag…
-
Unscored —
An issue was discovered in Exiv2 0.27. There is infinite recursion at BigTiffImage::printIFD in the file bigtiffimage.c…
-
Unscored —
DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse…
-
Unscored —
tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary files via path traversal with the path …
-
Unscored —
tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary image file (jpg/jpeg/png) via pa…
-
Unscored —
tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary directory as a consequence of a pa…
-
Unscored —
tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary file as a consequence of a paths…
-
Unscored —
tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary file as a consequence of a paths[0…
-
Unscored —
tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary file via path traversal with the path p…
-
Unscored —
tecrail Responsive FileManager 9.13.4 allows XSS via a media file upload with an XSS payload in the name, because of mi…
-
Unscored —
An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank passw…