2018

A flaw was found in Moodle 3.4 to 3.4.1, and 3.3 to 3.3.4. If a user account using OAuth2 authentication method was once

In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak fi

IBM WebSphere DataPower Appliances 7.1, 7.2, 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to a XML External Entity Injection

An elevation of privilege vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android

An elevation of privilege vulnerability in the Qualcomm kyro L2 driver. Product: Android. Versions: Android kernel. Andr

An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

A denial of service vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android ID: A

An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Androi

An elevation of privilege vulnerability in the Qualcomm sound codec driver. Product: Android. Versions: Android kernel.

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled.

A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a speci

A elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel.

A elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel.

A elevation of privilege vulnerability in the Android system (OTA updates). Product: Android. Versions: 7.0, 7.1.1, 7.1.

A other vulnerability in the Android media framework (Avcdec). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2

A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 8.0, 8.1. Android ID: A-693

In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. T

In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead

In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to missing bounds checks. T

In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead

In process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This

In process_service_attr_req of sdp_server.c, there is an out of bounds write due to a missing bounds check. This could l

A other vulnerability in the Android media framework (AACExtractor). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1,

In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. Thi

In CryptoHal::decrypt of CryptoHal.cpp, there is an out of bounds write due to improper input validation that results in

In impeg2d_dec_pic_data_thread of impeg2d_dec_hdr.c, there is a possible out of bounds write due to a missing bounds che

In ih264d_fmt_conv_420sp_to_420p of ih264d_utils.c, there is an out of bound write due to a missing out of bounds check

In impeg2d_api_set_display_frame of impeg2d_api_main.c, there is an out of bound write due to a missing bounds check. Th

In impeg2_idct_recon_sse42() of impeg2_idct_recon_sse42_intr.c, there is an out of bound write due to a missing bounds c

A elevation of privilege vulnerability in the Upstream kernel pci sysfs. Product: Android. Versions: Android kernel. And

A elevation of privilege vulnerability in the Upstream kernel mnh driver. Product: Android. Versions: Android kernel. An

A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel

A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-6996

A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-6649

A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1. Andr

A other vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2

In the nfc_hci_cmd_received() function of core.c, there is a possible out of bounds write due to a missing bounds check.

In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible NULL pointer dereference due to missing bounds chec

In writeToParcel and createFromParcel of RttManager.java, there is a permission bypass due to a write size mismatch. Thi

In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit in

In createFromParcel of VerifyCredentialResponse.java, there is a possible invalid parcel read due to improper input vali

In writeToParcel and readFromParcel of OutputConfiguration.java, there is a permission bypass due to mismatched serializ

In the FrameSequence_gif::FrameSequence_gif function of libframesequence, there is a out of bounds read due to a missing

In MediaPlayerService::Client::notify of MediaPlayerService.cpp, there is a possible use after free. This could lead to

In ihevcd_fmt_conv of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check. This cou

In CProgramConfig_ReadHeightExt of tpdec_asc.cpp, there is a possible stack buffer overflow due to a missing bounds chec

Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path.

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, due to insufficient i