Archive
14 June 2019
Vulnerabilities first published on this day (UTC), newest first.
49 results · Feed
-
Unscored —
An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and ori…
-
Unscored —
madskristensen MiniBlog through 2018-05-18 allows remote attackers to execute arbitrary ASPX code via an IMG element wi…
-
Unscored —
SAP NetWeaver Process Integration, versions: SAP_XIESR: 7.20, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, does no…
-
Unscored —
SAP BusinessObjects Business Intelligence Platform (Administration Console), versions 4.2, 4.3, module BILogon/appServi…
-
Unscored —
When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data be…
-
Unscored —
An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects Wh…
-
Unscored —
When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for…
-
Unscored —
When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a s…
-
Unscored —
Use-after-free vulnerability will occur if reset of the routing table encounters an invalid rule id while processing co…
-
Unscored —
A buffer overflow can occur while processing an extscan hotlist event in Snapdragon Auto, Snapdragon Consumer Electroni…
-
Unscored —
Buffer overflow in WLAN driver event handlers due to improper validation of array index in Snapdragon Auto, Snapdragon …
-
Unscored —
Buffer overflow in WLAN function due to improper check of buffer size before copying in Snapdragon Auto, Snapdragon Con…
-
Unscored —
A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto…
-
Unscored —
Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in…
-
Unscored —
An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapd…
-
Unscored —
Resource allocation error while playing the video whose dimensions are more than supported dimension in Snapdragon Auto…
-
Unscored —
An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapd…
-
Unscored —
Wrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto, Snapdragon Connectivity…
-
Unscored —
Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the fram…
-
Unscored —
The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapd…
-
Unscored —
Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitializ…
-
Unscored —
Lack of input validation in WLAN function can lead to potential heap overflow in Snapdragon Auto, Snapdragon Consumer I…
-
Unscored —
Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IO…
-
Unscored —
Possible out of bounds write due to improper input validation while processing DO_ACS vendor command in Snapdragon Auto…
-
Unscored —
Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IO…
-
Unscored —
Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress result…
-
Unscored —
While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information i…
-
Unscored —
The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forg…
-
Unscored —
Out of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in Snapdragon Auto, Snapdragon…
-
Unscored —
Out-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon Compute, Snapdragon Consu…
-
Unscored —
Due to missing permissions in Android Manifest file, Sensitive information disclosure issue can happen in PCI RCS app i…
-
Unscored —
Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decod…
-
Unscored —
Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connecti…
-
Unscored —
Truncated access authentication token leads to weakened access control for stored secure application data in Snapdragon…
-
Unscored —
Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdra…
-
High 7.5
Directory Traversal in lactate
A crafted `GET` request can be leveraged to traverse the directory structure of a host using the lactate web server package, and request arbitrary files outside of the specified web root. This allows for a remote attacker to gain access to arbitrary files on …
-
Medium —
Regular Expression Denial of Service in underscore.string
Versions of `underscore.string` prior to *3.3.5* are vulnerable to Regular Expression Denial of Service (ReDoS). The function `unescapeHTML` is vulnerable to ReDoS due to an overly-broad regex. The slowdown is approximately 2s for 50,000 characters but grows …
-
Critical 10.0
Sandbox Bypass Leading to Arbitrary Code Execution in constantinople
Versions of `constantinople` prior to 3.1.1 are vulnerable to a sandbox bypass which can lead to arbitrary code execution. ## Recommendation Update to version 3.1.1 or later.
-
Critical —
Failure to sanitize quotes which can lead to sql injection in squel
All versions of `squel` are vulnerable to sql injection. The `squel` package does not properly escape user provided input when provided using the `setFields` method. This could lead to sql injection if the query was then executed. Proof of concept demonstrati…
-
Medium 5.4
IBM Connections 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip…