Archive
6 May 2019
Vulnerabilities first published on this day (UTC), newest first.
47 results · Feed
-
Unscored —
Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdrago…
-
Unscored —
An integer underflow may occur due to lack of check when received data length from font_mgr_qsee_request_service is big…
-
Unscored —
Secure camera logic allows display/secure camera controllers to access HLOS memory during secure display or camera sess…
-
Unscored —
A new account can be inserted into simContacts service using Android command line tool in Snapdragon Automobile, Snapdr…
-
Unscored —
While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incor…
-
Unscored —
In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snap…
-
Unscored —
A Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in …
-
Unscored —
While processing camera buffers in camera driver, a use after free condition can occur in Snapdragon Automobile, Snapdr…
-
Unscored —
When HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in Snapdragon Mobile in versio…
-
Unscored —
In QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version M…
-
Unscored —CVE-2019-11569 Public exploit
Veeam ONE Reporter 9.5.0.3201 allows CSRF.
-
Unscored —CVE-2019-10999 Public exploit
The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server. The …
-
Unscored —
An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. It has a statically…
-
Unscored —
An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. It has a statically…
-
Unscored —
An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. An attacker may rev…
-
Unscored —
An issue was discovered in the Ascensia Contour NEXT ONE application for iOS and Android before 2019-01-15. An attacker…
-
Unscored —
An issue was discovered in the Ascensia Contour NEXT ONE app for iOS before 2019-01-15. An attacker may proxy communica…
-
Unscored —
An exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi functionality of Sierra …
-
High 8.6
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, be…
-
High 8.8
An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES…
KEV Dec 12, 2025 -
Unscored —
An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLi…
-
Unscored —
A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3. Acti…
-
Unscored —CVE-2018-4073 EPSS 26%
An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Si…
-
Unscored —CVE-2018-4072 EPSS 26%
An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Si…
-
Medium 6.1
ImpressCMS XSS
ImpressCMS 1.3.10 has XSS via the PATH_INFO to htdocs/install/index.php, htdocs/install/page_langselect.php, or htdocs/install/page_modcheck.php.
-
Unscored —CVE-2018-4071 EPSS 18%
An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of S…
-
Unscored —CVE-2018-4070 EPSS 18%
An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of S…
-
Unscored —
An exploitable cross-site scripting vulnerability exists in the ACEManager ping_result.cgi functionality of Sierra Wire…
-
Unscored —CVE-2018-4061 EPSS 19%
An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless …
-
Unscored —CVE-2018-4068 EPSS 11%
An exploitable information disclosure vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink E…
-
Unscored —
The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?…
-
Unscored —
An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLin…
-
High 7.5
Infinite Loop in Apache Sanselan
Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.
-
High 7.5
Improper Input Validation in Apache Sanselan
Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging.
-
Unscored —
In UniFi Video 3.10.0 and prior, due to the lack of CSRF protection, it is possible to abuse the Web API to make change…
-
Unscored —
An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() ca…
-
Unscored —
A user having access to the UI of a Revive Adserver instance could be tricked into clicking on a specifically crafted a…
-
High 7.5
Improper Input Validation and Buffer Over-read in mqtt-packet
A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions < 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5.6.1, 6.0.0 - 6.1.2 for decoding.
-
Unscored —
This vulnerability was caused by an incomplete fix to CVE-2017-0911. Twitter Kit for iOS versions 3.0 to 3.4.0 is vulne…
-
High 8.1
Potentially compromised builds
All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.