Archive
September 2019
Vulnerabilities first published in this month (UTC), newest first.
1,540 results · Feed
-
Unscored —
In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local e…
-
Unscored —
In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check. This c…
-
Unscored —
In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead t…
-
Unscored —
In the Android kernel in the touchscreen driver there is a possible out of bounds write due to a missing bounds check. …
-
Unscored —
In the Android kernel in the FingerTipS touchscreen driver there is a possible memory corruption due to a race conditio…
-
Unscored —
In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bou…
-
Unscored —
In the Android kernel in the FingerTipS touchscreen driver there is a possible use-after-free due to improper locking. …
-
Unscored —
In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to improper inpu…
-
Unscored —
In the Android kernel in the vl53L0 driver there is a possible out of bounds write due to a permissions bypass. This co…
-
Unscored —
In the Android kernel in the mnh driver there is possible memory corruption due to a use after free. This could lead to…
-
Unscored —
In the Android kernel in the mnh driver there is a possible out of bounds write due to improper input validation. This …
-
Unscored —
In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible out of bounds write due to a use …
-
Unscored —
In the Android kernel in the mnh driver there is a use after free due to improper locking. This could lead to escalatio…
-
Unscored —
In the Android kernel in the mnh driver there is a possible out of bounds write due to a missing bounds check. This cou…
-
Unscored —
In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after free due to improper lo…
-
Unscored —
In the Android kernel in the mnh driver there is a race condition due to insufficient locking. This could lead to a use…
-
Unscored —
In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pag…
-
Unscored —
In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds c…
-
Unscored —
In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bou…
-
Unscored —
In the Android kernel in VPN routing there is a possible information disclosure. This could lead to remote information …
-
Unscored —
In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to share…
-
Unscored —
In the Android kernel in the bootloader there is a possible secure boot bypass. This could lead to local escalation of …
-
Unscored —
In the Android kernel in Bluetooth there is a possible out of bounds write due to a missing bounds check. This could le…
-
Unscored —
Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc.
-
Unscored —
iF.SVNAdmin through 1.6.2 allows svnadmin/usercreate.php CSRF to create a user.
-
Medium 6.1
XSS vulnerability in Author URL of themes in Mautic
An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json.
-
Unscored —
An issue was discovered in D-Link DIR-806 devices. There is a stack-based buffer overflow in function hnap_main at /htd…
-
Critical 9.8CVE-2019-10891 EPSS 19%
An issue was discovered in D-Link DIR-806 devices. There is a command injection in function hnap_main, which calls syst…
-
Unscored —
Insufficient boundary checks when processing M_SOFx markers from JPEG headers in the GD extension could allow access to…
-
Unscored —
Insufficient boundary checks when processing the JPEG APP12 block marker in the GD extension could allow access to out-…
-
Unscored —
A type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl-http extension 3.1.0bet…
-
Unscored —
Windows 8.3 path equivalence handling flaw allows LibreLogo script execution
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-ins…
-
Unscored —
Unsafe URL assembly flaw in allowed script location check
LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python …
-
Critical 9.8
Airbrake keys not being filtered
The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklist_keys configuration option and consequently may disclose passwords to unauthorized actors. This is fixed in 4.2.4 (also, 4.2.2 and earlier are unaffected).
-
Unscored —
Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrar…
-
Unscored —
An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a…
-
Medium 5.3
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The …
-
Unscored —
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.
-
Unscored —
A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default instal…
-
Unscored —
An issue was discovered in Tyto Sahi Pro 6.x through 8.0.0. TestRunner_Non_distributed (and distributed end points) doe…