Archive
19 November 2024
Vulnerabilities first published on this day (UTC), newest first.
114 results · Clear filters · Feed
-
High 8.8
The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 1…
KEV Nov 21, 2024 -
High 7.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app m…
-
High 7.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app m…
-
High 8.8
In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remot…
-
High 7.5
In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This…
-
High 7.7
HTML Cleaner allows crafted scripts in special contexts like svg or math to pass through
lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.0, the HTML Parser in lxml does not properly handle context-switching for special HTML tags such as `<svg>`, `<math>` and `<noscript>`. This beh…
-
High 7.8
In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there is a possible permissio…
-
High 8.4
In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a use after free. This cou…
-
High 7.8
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. Th…
-
High 7.5
In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This cou…
-
High 7.8
In f_hidg_read and hidg_disable of f_hid.c, there is a possible use-after-free due to improper locking. This could lead…
-
High 8.8CVE-2018-9411 Public exploit
In decrypt of ClearKeyCasPlugin.cpp there is a possible out-of-bounds write due to a missing bounds check. This could l…
-
High 7.6
IBM Concert Software SQL injection
IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
-
High 8.1
Zoom Apps - Improper Input Validation
Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via network access.
-
High 7.8
In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds che…
-
High 7.8
In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check. Th…
-
High 7.8
In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary p…
-
High 7.8
In download.c there is a special mode allowing user to download data into memory and causing possible memory corruption…
-
High 7.8
In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local…
-
High 7.8
In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to imprope…
-
High 7.8
In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write …
-
High 8.8
Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corr…
-
High 7.5
In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to…
-
High 7.5
In SMF_ParseMetaEvent of eas_smf.c, there is a possible integer overflow. This could lead to remote denial of service d…
-
High 8.0
A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an a…
-
High 8.8
This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and…
-
High 7.8
In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking. This could lea…
-
High 7.5
In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to …
-
High 7.8
In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type c…
-
High 7.8CVE-2018-9338 Public exploit
In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check. Th…
-
High 7.8
In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an app to keep permissions …
-
High 7.8
In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch.…
-
High 7.8
i40e: fix race condition by adding filter's intermediate sync state
In the Linux kernel, the following vulnerability has been resolved: i40e: fix race condition by adding filter's intermediate sync state Fix a race condition in the i40e driver that leads to MAC/VLAN filters becoming corrupted and leaking. Address the issue th…
-
High 8.4
virtio_net: Add hash_key_length check
In the Linux kernel, the following vulnerability has been resolved: virtio_net: Add hash_key_length check Add hash_key_length check in virtnet_probe() to avoid possible out of bound errors when setting/reading the hash key.
-
High 7.8
drm/panthor: Lock XArray when getting entries for the VM
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Lock XArray when getting entries for the VM Similar to commit cac075706f29 ("drm/panthor: Fix race when converting group handle to group object") we need to use the XArray's inte…
-
High 7.8
mm/thp: fix deferred split unqueue naming and locking
In the Linux kernel, the following vulnerability has been resolved: mm/thp: fix deferred split unqueue naming and locking Recent changes are putting more pressure on THP deferred split queues: under load revealing long-standing races, causing list_del corrupt…
-
High 7.8
Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tri…
-
High 7.8
Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by win…
-
High 7.8
Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tri…
-
High 7.8
Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library (Modules::ScanDeps) which …