2019

Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Sna

Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, S

Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdrag

Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connecti

KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto,

Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Sna

Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon

Exceeding the limit of usage entries are not tracked and the information will be lost causing the content to lose contin

Improper input validation in wireless service messaging module for data received from broadcast messages can lead to hea

Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdr

Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdr

Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapd

Improper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto, Snapdragon Compute, Snapdragon

Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute,

Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdra

Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues i

Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a bu

A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and e

An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5MM_xstrdup in H

An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5VM_memcpyvv in

Jamf Self Service 10.9.0 allows man-in-the-middle attackers to obtain a root shell by leveraging the "publish Bash shell

An issue was discovered in Hsycms V1.1. There is an XSS vulnerability via the name field to the /book page.

A vulnerability in the client application for iOS of Cisco Webex Teams could allow an authenticated, remote attacker to

A vulnerability in the certificate handling component of the Cisco SPA112, SPA525, and SPA5X5 Series IP Phones could all

An issue was discovered in Exiv2 0.27. There is infinite recursion at BigTiffImage::printIFD in the file bigtiffimage.cp

An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image

An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields

DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse

tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary files via path traversal with the path p

tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary image file (jpg/jpeg/png) via pat

tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary file as a consequence of a paths[

tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary file via path traversal with the path pa

tecrail Responsive FileManager 9.13.4 allows XSS via a media file upload with an XSS payload in the name, because of mis

tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary file as a consequence of a paths[0]

tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary directory as a consequence of a pat

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure vulnerability via reque

An issue was discovered on D-Link DIR-878 1.12B01 devices. Because strncpy is misused, there is a stack-based buffer ove

An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank passwo

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. The "user" account has a blank password.

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands

In irisnet-crypto before 1.1.7 for IRISnet, the util/utils.js file allows code execution because of unsafe eval usage.

Ming (aka libming) 0.4.8 has an out of bounds write vulnerability in the function strcpyext() in the decompile.c file in

Ming (aka libming) 0.4.8 has a NULL pointer dereference in the function getString() in the decompile.c file in libutil.a

The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer o

The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer o

drivers/leds/leds-aw2023.c in the led driver for custom Linux kernels on the Xiaomi Redmi 6pro daisy-o-oss phone has sev

The ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has a

XSS exists in WUZHI CMS 4.1.0 via index.php?m=content&f=postinfo&v=listing&set_iframe=[XSS] to coreframe/app/content/pos

XSS exists in WUZHI CMS 4.1.0 via index.php?m=message&f=message&v=add&username=[XSS] to coreframe/app/message/message.ph

XSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=baidumap&x=[XSS]&y=[XSS] to coreframe/app/core/map.php.