2018

There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Aut

Improper access control in core module lead XBL_LOADER performs the ZI region clear for QTEE instead of XBL_SEC in Snapd

Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850

Lack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon Mobile in version SD 8

Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdrag

Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Au

Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdrag

The use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile

When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck i

A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206,

A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845,

Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version I

When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Sna

XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unuse

ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W

A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobile

Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon We

During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automo

The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext. The location

Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email b

Crossroads 2.81 does not properly handle the /tmp directory during a build of xr. A local attacker can first create a wo

The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users t

A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators

Reliance 4 SCADA/HMI, Version 4.7.3 Update 3 and prior. This vulnerability could allow an unauthorized attacker to injec

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Aler

An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Al

An issue was discovered in Xpdf 4.00. catalog->getNumPages() in AcroForm.cc allows attackers to launch a denial of servi

An issue was discovered in Xpdf 4.00. XRef::readXRefStream in XRef.cc allows attackers to launch a denial of service (In

The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installatio

A command injection vulnerability in the setup API in the Neato Botvac Connected 2.2.0 allows network attackers to execu

CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-MM

Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to obtain sensitive credentia

AudioCodes 440HD and 450HD devices 3.1.2.89 and earlier allows man-in-the-middle attackers to obtain sensitive credentia

The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive ph

ServersCheck Monitoring Software through 14.3.3 allows local users to cause a denial of service (menu functionality loss

ServersCheck Monitoring Software through 14.3.3 has Persistent and Reflected XSS via the sensors.html status parameter,

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker with physical access to

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that may allow an attacker to force-pair

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery.

SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute

Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remo

The server API in the Anda app relies on hardcoded credentials.

An issue was discovered on Eaton UPS 9PX 8000 SP devices. The administration panel is vulnerable to a CSRF attack on the

An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the SNMP version 3 user's password. Th

An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the user's password. The web page disp

XSS exists in cgi-bin/webcm on D-link DSL-2640T routers via the var:RelaodHref or var:conid parameter.

www/guis/admin/application/controllers/UserController.php in the administration login interface in MailCleaner CE 2018.0

ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in Fi

Vesta Control Panel through 0.9.8-22 has XSS via the edit/web/ domain parameter, the list/backup/ backup parameter, the