Archive
May 2019
Vulnerabilities first published in this month (UTC), newest first.
1,337 results · Feed
-
Unscored —CVE-2019-10685 Public exploit
A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Heidelberg Prinect Archiver v2013 release 1.0.
-
Unscored —
An issue was discovered in Eventum 3.5.0. /htdocs/post_note.php has XSS via the garlic_prefix parameter.
-
Unscored —
SQL injection exists in ADD Clicking MLM Software 1.0, Binary MLM Software 1.0, Level MLM Software 1.0, Singleleg MLM S…
-
Unscored —
An issue was discovered in Cloudera Manager before 5.13.4, 5.14.x before 5.14.4, and 5.15.x before 5.15.1. A read-only …
-
Unscored —
An issue was discovered in Bitdefender Engines before 7.76662. A vulnerability has been discovered in the iso.xmd parse…
-
Unscored —
An issue was discovered in Bitdefender Engines before 7.76675. A vulnerability has been discovered in the rar.xmd parse…
-
Unscored —
An issue was discovered in Bitdefender Engines before 7.76808. A vulnerability has been discovered in the dalvik.xmd pa…
-
Unscored —
In Zoho ManageEngine ADSelfService Plus 5.x through 5704, an authorization.do cross-site Scripting (XSS) vulnerability …
-
Unscored —
The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload ma…
-
Unscored —
Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdra…
-
Unscored —
Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snap…
-
Unscored —
Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem i…
-
Unscored —
While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length i…
-
Unscored —
ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto, Snapdragon Compute, S…
-
Unscored —
Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon C…
-
Unscored —
Failure to initialize the extra buffer can lead to an out of buffer access in WLAN function in Snapdragon Auto, Snapdra…
-
Unscored —
Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Con…
-
Unscored —
Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Comp…
-
Unscored —
Due to the missing permissions on several content providers of the RCS app in its android manifest file will lead to an…
-
Unscored —
Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section re…
-
Unscored —
Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Sna…
-
Unscored —
Use-after-free condition due to Improper handling of hrtimers when the PMU driver tries to access its events in Snapdra…
-
Unscored —
Processing messages after error may result in user after free memory fault in Snapdragon Auto, Snapdragon Compute, Snap…
-
Unscored —
Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer …
-
Unscored —
An unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto, Snapdragon Compute, Snapdragon…
-
Unscored —
Improper authentication in locked memory region can lead to unprivilged access to the memory in Snapdragon Auto, Snapdr…
-
Unscored —
While updating blacklisting region shared buffered memory region is not validated against newly updated black list, cau…
-
Unscored —
Possible integer underflow can happen when calculating length of elementary stream info from invalid section length whi…
-
Unscored —
Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing…
-
Unscored —
Possible integer underflow can happen when calculating length of elementary stream map from invalid packet length which…
-
Unscored —
Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF.
-
Unscored —
Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Comp…
-
Unscored —
Lack of input validation before copying can lead to a buffer over read in WLAN function in Snapdragon Auto, Snapdragon …
-
Unscored —
Index of array is processed in a wrong way inside a while loop and result in invalid index (-1 or something else) leads…
-
Unscored —
Improper input validation on input data which is used to locate and copy the additional IEs in WLAN function can lead t…
-
Unscored —
Lack of check on length parameter may cause buffer overflow while processing WMI commands in Snapdragon Auto, Snapdrago…
-
Unscored —CVE-2019-10847 Public exploit
Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.
-
Unscored —
Improper input validation on input which is used as an array index will lead to an out of bounds issue while processing…
-
Unscored —
Data length received from firmware is not validated against the max allowed size which can result in buffer overflow. i…
-
Unscored —
Improper buffer length validation in WLAN function can lead to a potential integer oveflow issue in Snapdragon Auto, Sn…