Skip to content
OpenAdvisories

Archive

6 September 2019

Vulnerabilities first published on this day (UTC), newest first.

55 results · Feed

  • Unscored —

    An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the n…

  • Unscored —

    In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON statement. This could lead to…

  • Unscored —

    In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. Thi…

  • Unscored —

    In the Android kernel in SEC_TS touch driver there is a possible out of bounds read due to a missing bounds check. This…

  • Unscored —

    In the Android kernel in FingerTipS touchscreen driver there is a possible out of bounds read due to a missing bounds c…

  • Unscored —

    In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could l…

  • Unscored —

    In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This c…

  • Unscored —

    In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This cou…

  • Unscored —

    In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local e…

  • Unscored —

    In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check. This c…

  • Unscored —

    In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead t…

  • Unscored —

    In the Android kernel in the touchscreen driver there is a possible out of bounds write due to a missing bounds check. …

  • Unscored —

    In the Android kernel in the FingerTipS touchscreen driver there is a possible memory corruption due to a race conditio…

  • Unscored —

    In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bou…

  • Unscored —

    In the Android kernel in the FingerTipS touchscreen driver there is a possible use-after-free due to improper locking. …

  • Unscored —

    In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to improper inpu…

  • Unscored —

    In the Android kernel in the vl53L0 driver there is a possible out of bounds write due to a permissions bypass. This co…

  • Unscored —

    In the Android kernel in the mnh driver there is possible memory corruption due to a use after free. This could lead to…

  • Unscored —

    In the Android kernel in the mnh driver there is a possible out of bounds write due to improper input validation. This …

  • Unscored —

    In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible out of bounds write due to a use …

  • Unscored —

    In the Android kernel in the mnh driver there is a use after free due to improper locking. This could lead to escalatio…

  • Unscored —

    In the Android kernel in the mnh driver there is a possible out of bounds write due to a missing bounds check. This cou…

  • Unscored —

    In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after free due to improper lo…

  • Unscored —

    In the Android kernel in the mnh driver there is a race condition due to insufficient locking. This could lead to a use…

  • Unscored —

    In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pag…

  • Unscored —

    In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds c…

  • Unscored —

    In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bou…

  • Unscored —

    In the Android kernel in VPN routing there is a possible information disclosure. This could lead to remote information …

  • Unscored —

    In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to share…

  • Unscored —

    In the Android kernel in the bootloader there is a possible secure boot bypass. This could lead to local escalation of …

  • Unscored —

    In the Android kernel in Bluetooth there is a possible out of bounds write due to a missing bounds check. This could le…

  • Unscored —

    Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc.

  • Unscored —

    iF.SVNAdmin through 1.6.2 allows svnadmin/usercreate.php CSRF to create a user.

  • Medium 6.1

    XSS vulnerability in Author URL of themes in Mautic

    An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json.

  • Unscored —

    An issue was discovered in D-Link DIR-806 devices. There is a stack-based buffer overflow in function hnap_main at /htd…

  • Critical 9.8
    CVE-2019-10891 EPSS 19%

    An issue was discovered in D-Link DIR-806 devices. There is a command injection in function hnap_main, which calls syst…

  • Unscored —

    Insufficient boundary checks when processing M_SOFx markers from JPEG headers in the GD extension could allow access to…

  • Unscored —

    Insufficient boundary checks when processing the JPEG APP12 block marker in the GD extension could allow access to out-…

  • Unscored —

    A type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl-http extension 3.1.0bet…

  • Unscored —

    Windows 8.3 path equivalence handling flaw allows LibreLogo script execution

    LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-ins…