Archive
September 2019
Vulnerabilities first published in this month (UTC), newest first.
1,540 results · Feed
-
Low 2.4
RSA BSAFE Micro Edition Suite versions prior to 4.4 (in 4.0.x, 4.1.x, 4.2.x and 4.3.x) are vulnerable to a Heap-based B…
-
High 7.5
RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edit…
-
Medium 5.9
RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior to 4.1.3.3 (in 4.1.x), and RS…
-
Medium 5.9
RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and 4.3.x), are vulnerabl…
-
Medium 5.9
RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 and RSA Micro Edition Suite versions prior to 4.4 are vulnerab…
-
Medium 4.4
RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3) different Improper Clearing o…
-
Medium 4.6
Cargo prior to Rust 1.26.0 may download the wrong dependency
Cargo prior to Rust 1.26.0 may download the wrong dependency if your package.toml file uses the `package` configuration key. Usage of the `package` key to rename dependencies in `Cargo.toml` is ignored in Rust 1.25.0 and prior. When Rust 1.25.0 and prior is u…
-
High —
High severity vulnerability that affects PeterO.Cbor
### Impact The CBOR library supports optional tags that enable CBOR objects to contain references to objects within them. Versions earlier than 4.0 resolved those references automatically. While this by itself doesn't cause much of a security problem, a denia…
-
High 7.3
Buffer Overflow in centra
## Denial of Service ### Impact Affected Centra versions will, when not in stream mode, buffer responses to requests into memory with no size limit. This issue affects anyone requesting content from untrusted sources. ### Patches Version 2.4.0 resolves the is…
-
Unscored —
Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack…
-
Unscored —
Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack…
-
Unscored —
Evernote before 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute is not used for attac…
-
Unscored —
An issue was discovered in the Voyager package through 1.2.7 for Laravel. An attacker with admin privileges and Compass…
-
Unscored —
Request smuggling due to accepting invalid headers in net/http via net/textproto
Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.
-
Unscored —
NETGEAR SRX5308 4.3.5-3 devices allow SQL Injection, as exploited in the wild in September 2019 to add a new user accou…
-
Unscored —
Description: Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 applications are pot…
-
Unscored —
Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control. Th…
-
Unscored —
Insufficient sanitization during device search in Netdisco 2.042010 allows for reflected XSS via manipulation of a URL …
-
Unscored —
Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap a…
-
Unscored —
Buffer overflow due to improper validation of buffer size while IPA driver processing to perform read operation in Snap…
-
Unscored —
Classic buffer overflow vulnerability while playing the specific video whose Decode picture buffer size is more than 16…
-
Unscored —
Buffer overflow when the audio buffer size provided by user is larger than the maximum allowable audio buffer size. in …
-
Unscored —
Possible use-after-free issue due to a race condition while calling camera ioctl concurrently in Snapdragon Compute, Sn…
-
Unscored —
Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon…
-
Unscored —
Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address…
-
Unscored —
Buffer overflow in WLAN NAN function due to lack of check of count value received in NAN availability attribute in Snap…
-
Unscored —
Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Sn…
-
Unscored —
Boot image not getting verified by AVB in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W…
-
Unscored —
Improper validation of read and write index of tx and rx fifo`s before using for data copy from fifo can lead to out-of…
-
Unscored —
Use after free issue occurs If another instance of open for voice_svc node has been called from application without clo…
-
Unscored —
BT process died and BT toggled due to null pointer dereference when invalid vendor pass through command sent from remot…
-
Unscored —
Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in Snapdragon Auto, Snapdragon C…
-
Unscored —
Possible use after free issue due to improper input validation in volume listener library in Snapdragon Auto, Snapdrago…
-
Unscored —
Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdrago…
-
Unscored —
Device record of the pairing device used after free during ACL disconnection in Snapdragon Auto, Snapdragon Compute, Sn…
-
Unscored —
While processing QCA_NL80211_VENDOR_SUBCMD_AVOID_FREQUENCY vendor command, driver does not validate the data obtained f…
-
Unscored —
Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, …
-
Unscored —
An issue was discovered in the image-manager in Xoops 2.5.10. When any image with a JavaScript payload as its name is h…
-
Medium 5.3
IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. …
-
Medium 5.3
IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information caused by the im…