2018

Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C0

A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer

A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer

A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer

A ctl_set KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (

A UrlfWTPPagePtr KERedirect Use-After-Free Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer

Many resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 befor

The XsrfErrorAction resource in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from versi

Several administrative resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from v

Under certain mode of operations, HLOS may be able get direct or indirect access through DXE channels to tamper with the

While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due to

XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdra

Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small

While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Sn

Secure display content could be accessed by third party trusted application after creating a fault in other trusted appl

Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Sna

Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Sna

Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, S

Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdra

Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobi

While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size o

When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can

Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, S

Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QC

Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdrag

When dynamic memory allocation fails, currently the process sleeps for one second and continues with infinite loop witho

In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting i

Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory cor

Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile i

BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash.

chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against a

chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second

In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c d

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c d

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer over-read in internalPrintf in miniz/lupn

Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/pm.php folder parameter.

DedeCMS 5.7 SP2 allows XSS via the plus/qrcode.php type parameter.

Lack of an authentication mechanism in KERUI Wifi Endoscope Camera (YPC99) allows an attacker to watch or block the came

Missing authentication and improper input validation in KERUI Wifi Endoscope Camera (YPC99) allow an attacker to execute

Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated attac

Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site scripting vulnerabilities. A remote u

Symantec Web Isolation (WI) 1.11 prior to 1.11.21 is susceptible to a reflected cross-site scripting (XSS) vulnerability

In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt

LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3

IBM Security Access Manager Appliance 9.0.3.1, 9.0.4.0 and 9.0.5.0 could allow unauthorized administration operations wh

Leanote 2.6.1 has XSS via the Blog Basic Setting title field, which is mishandled during rendering of the "likes" page.

ServersCheck Monitoring Software before 14.3.4 allows SQL Injection by an authenticated user.

ThinkPHP 3.2.4 has SQL Injection via the order parameter because the Library/Think/Db/Driver.class.php parseOrder functi

Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter.