Archive
25 July 2019
Vulnerabilities first published on this day (UTC), newest first.
69 results · Feed
-
Critical 9.1CVE-2019-10744 Public exploit
Prototype Pollution in lodash
Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.
-
Unscored —
NREL EnergyPlus, Versions 8.6.0 and possibly prior versions, The application fails to prevent an exception handler from…
-
Unscored —
Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability can be triggered when an attacker pro…
-
Unscored —
Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability is triggered when input passed to the…
-
Critical 9.8
Deserialization of Untrusted Data in Apache Storm
In Apache Storm versions 1.1.0 to 1.2.2, when the user is using the storm-kafka-client or storm-kafka modules, it is possible to cause the Storm UI daemon to deserialize user provided bytes into a Java class.
-
High 7.5
Exposure of Sensitive Information in Apache Storm Logviewer
The Apache Storm Logviewer daemon exposes HTTP-accessible endpoints to read/search log files on hosts running Storm. In Apache Storm versions 0.9.1-incubating to 1.2.2, it is possible to read files off the host's file system that were not intended to be acces…
-
Unscored —
Yellowfin Smart Reporting All Versions Prior to 7.3 is affected by: Incorrect Access Control - Privileges Escalation. T…
-
Unscored —
An out of bounds write is possible via a specially crafted packet in certain configurations of Proxygen due to improper…
-
Medium 5.3
Undertow Missing Authorization when requesting a protected directory without trailing slash
undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api.
-
Unscored —
A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to w…
-
High 7.3
Auth0 Passport-SharePoint does not validate JWT signature
Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This allows attackers to forge tokens and bypass authentication and authorization mechanisms.
-
Unscored —
Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual configurations that use t…
-
Unscored —
VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly …
-
Unscored —
Out of bound read and information disclosure in firmware due to insufficient checking of an embedded structure that can…
-
Unscored —
Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation…
-
Unscored —
Race condition while accessing DMA buffer in jpeg driver in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consum…
-
Unscored —
improper input validation in allocation request for secure allocations can lead to page fault. in Snapdragon Auto, Snap…
-
Unscored —
Out of bound access when reason code is extracted from frame data without validating the frame length in Snapdragon Aut…
-
Unscored —
Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto, Snapdragon Compute, Snap…
-
Unscored —
User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto,…
-
Unscored —
User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go thro…
-
Unscored —
While storing calibrated data from firmware in cache, An integer overflow may occur since data length received may exce…
-
Unscored —
Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto, S…
-
Unscored —
An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snap…
-
Unscored —
Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapd…
-
Unscored —
Pointer dereference while freeing IFE resources due to lack of length check of in port resource. in Snapdragon Consumer…
-
Unscored —
Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapd…
-
Unscored —
Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Co…
-
Unscored —
Possible buffer overflow when number of channels passed is more than size of channel mapping array in Snapdragon Auto, …
-
Unscored —
Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configur…
-
Unscored —
Possible race condition that will cause a use-after-free when writing to two sysfs entries at nearly the same time in S…
-
Unscored —
Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute…
-
Unscored —
When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT…
-
Unscored —
An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application. in Snapdrago…
-
Unscored —
Data token is received from ADSP and is used without validation as an index into the array leads to out of bound access…
-
Unscored —
When handling the vendor command there exists a potential buffer overflow due to lack of input validation of data buffe…
-
Unscored —
Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon Auto, Snapdragon Compute…
-
Unscored —
Clients hostname gets added to DNS record on device which is running dnsmasq resulting in an information exposure in Sn…
-
Unscored —
Buffer over-read can occur while parsing an ogg file with a corrupted comment block. in Snapdragon Auto, Snapdragon Con…
-
Unscored —
Null pointer dereference during secure application termination using specific application ids. in Snapdragon Auto, Snap…