Archive
July 2019
Vulnerabilities first published in this month (UTC), newest first.
1,623 results · Feed
-
Unscored —
Out of bound read can happen due to lack of NULL termination on user controlled data in WLAN in Snapdragon Auto, Snapdr…
-
Unscored —
Unauthorized access from GPU subsystem to HLOS or other non secure subsystem memory can lead to information disclosure …
-
Unscored —
Possible buffer overflow while processing the high level lim process action frame due to improper buffer length validat…
-
Unscored —
A race condition occurs while processing perf-event which can lead to a use after free condition in Snapdragon Auto, Sn…
-
Unscored —
Null pointer dereference occurs for channel context while opening glink channel in Snapdragon Auto, Snapdragon Consumer…
-
Unscored —
Out of bound access can occur due to buffer copy without checking size of input received from WLAN firmware in Snapdrag…
-
Unscored —
Possible buffer overflow at the end of iterating loop while getting the version info and lead to information disclosure…
-
Unscored —
XBL_SEC image authentication and other crypto related validations are accessible to a compromised OEM XBL Loader due to…
-
Medium 4.2
IBM QRadar SIEM 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource t…
-
Medium 4.9
The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow. This could allow executi…
-
Medium 5.1
A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Acc…
-
Unscored —
An issue was discovered in the Viral Quiz Maker - OnionBuzz plugin before 1.2.2 for WordPress. One could exploit the po…
-
Unscored —
An issue was discovered in the Viral Quiz Maker - OnionBuzz plugin before 1.2.7 for WordPress. One could exploit the id…
-
Unscored —
An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling xfa.event.rest XFA …
-
Unscored —
An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a JavaScript Denial of S…
-
Unscored —
An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash due to the repeated release of t…
-
Unscored —
An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling certain XFA JavaScr…
-
Unscored —
An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash due to the lack of proper valida…
-
Unscored —
An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to Memory Corruption due to…
-
Unscored —
An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to Heap Corruption due to d…
-
Unscored —
An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a NULL pointer dereferen…
-
Unscored —
An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling the clone function …
-
Unscored —
An Arbitrary File Deletion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote …
-
Unscored —
A Local File Inclusion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote atta…
-
Unscored —
An issue was discovered in the wp-code-highlightjs plugin through 0.6.2 for WordPress. wp-admin/options-general.php?pag…
-
Unscored —
An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. The core components that create and la…
-
Unscored —
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versi…
-
Unscored —
An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and informati…
-
Unscored —
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versi…
-
Unscored —
A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress.…
-
Unscored —
Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web a…
-
Unscored —
Security vulnerabilities in HPE UIoT versions 1.6, 1.5, 1.4.2, 1.4.1, 1.4.0, and 1.2.4.2 could allow unauthorized remot…
-
Unscored —
A security vulnerability in HPE IceWall SSO Agent Option and IceWall MFA (Agent module ) could be exploited remotely to…
-
High 8.1
Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with Glo…
KEV Jan 10, 2022 -
Medium 6.7
exacqVision Server Unquoted Service Path
ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated user is able to insert code in their system root path it potentially can be executed during the application startup. This…
-
Unscored —
Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs (directly connected to GPIO p…
-
Unscored —
In NVIDIA Jetson TX1 L4T R32 version branch prior to R32.2, Tegra bootloader contains a vulnerability in nvtboot in whi…
-
Unscored —
dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.
-
Unscored —
A vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner, while adding a device to the …
-
Unscored —
A vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner. Actions performed on the app …