CVEs published in September 2018
1,223 vulnerabilities, 177 critical, 3 exploited.
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +29 more +31 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU...6.5 Medium
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +26 more +28 moreIn Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650,...7.5 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +26 more +28 moreIn Snapdragon (Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655,...8.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +28 more +30 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W,...7.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +34 more +36 moreIn Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650,...7.5 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +25 more +27 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU...7.5 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +27 more +29 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W,...9.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +30 more +32 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W,...7.8 High
- qualcomm msm8909w firmware, msm8996au firmware, sd205 firmware +18 more +20 moreIn Snapdragon (Automobile, Mobile, Wear) in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +33 more +35 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645,...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +33 more +35 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645,...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +37 more +39 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650,...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +35 more +37 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645,...9.8 Critical
- qualcomm msm8996au firmware, sd425 firmware, sd427 firmware +17 more +19 moreIn Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450,...4.7 Medium
- qualcomm fsm9055 firmware, fsm9955 firmware, mdm9607 firmware +20 more +22 moreIn Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in version FSM9055, FSM9955, MDM9607,...5.5 Medium
- qualcomm mdm9607 firmware, msm8909w firmware, msm8996au firmware +19 more +21 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212...7.8 High
- zohocorp manageengine opmanagerGlobal Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection.9.8 Critical
- slack archivebot project archivebotSQL injection vulnerability in archivebot.py in docmarionum1 Slack ArchiveBot (aka slack-archive...9.8 Critical
reportbugDebianreportbug - security updateNo score- hdfgroup hdf5A SIGFPE signal is raised in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF...6.5 Medium
- mp4v2 project mp4v2The function MP4Free() in mp4property.cpp in libmp4v2 2.1.0 internally calls free() on a invalid...6.5 Medium
- mp4v2 project mp4v2The function mp4v2::impl::MP4Track::FinishSdtp() in mp4track.cpp in libmp4v2 2.1.0 mishandles...6.5 Medium
- hdfgroup hdf5Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through 1.10.3...6.5 Medium
- hdfgroup hdf5A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the...6.5 Medium
- hylafax, debian linux, hylafax hylafax\+ +2 moreHylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in...9.8 Critical
- telegram desktop** DISPUTED ** Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause a denial of...7.5 High
- exiv2Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service ...6.5 Medium
- exiv2Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service ...6.5 Medium
- nmap4j project nmap4jnmap4j 1.1.0 allows attackers to execute arbitrary commands via shell metacharacters in an...9.8 Critical
- blackberry enterprise mobility server (bems), enterprise mobility server +1 moreA directory traversal vulnerability in the Connect Service of the BlackBerry Enterprise Mobility...4.7 Medium
- elastic elasticsearchExposure of Sensitive Information to an Unauthorized Actor in Elasticsearch8.8 High
- elastic kibana, redhat openshift container platform +1 moreKibana versions 5.3.0 to 6.4.1 had a cross-site scripting (XSS) vulnerability via the source...6.1 Medium
- elastic cloud enterpriseIn Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 it was discovered that a user could...5.3 Medium
- elastic cloud enterpriseElastic Cloud Enterprise (ECE) versions prior to 1.1.4 contain an information exposure...7.5 High
- elastic elasticsearch, azure repository +1 moreA sensitive data disclosure flaw was found in the Elasticsearch repository-azure (formerly...8.1 High
- elastic elasticsearchIn Elasticsearch versions 6.0.0-beta1 to 6.2.4 a disclosure flaw was found in the _snapshot API....6.5 Medium
- elastic cloud enterprise (ece), cloud enterprise +1 moreIn Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 a default master encryption key is used...5.9 Medium
- elastic elasticsearch x-pack machine learning, elasticsearch x-pack, kibana x-pack +1 more +3 moreElasticsearch subject to cross site scripting6.1 Medium
- elastic elasticsearch x-pack machine learning, elasticsearch x-pack, kibana x-pack +1 more +3 moreX-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS)...5.4 Medium
- foscam c1 indoor hd camera, c1 firmware +1 moreA missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera...9.8 Critical
- foscam c1 indoor hd camera, c1 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the...8.8 High
- foscam c1 indoor hd camera, c1 firmware +1 moreAn exploitable command injection vulnerability exists in the web management interface used by the...8.8 High
- linksys velop firmwareLinksys Velop 1.1.2.187020 devices allow unauthenticated command injection, providing an attacker...8.8 High
- awesomemotive duplicatorAn issue was discovered in Snap Creek Duplicator before 1.2.42. By accessing leftover installer...9.8 Critical
- foscam c1 indoor hd camera, c1 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the UPnP implementation used by the Foscam...7.5 High
- foscam c1 indoor hd camera, c1 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the web management interface used by the...8.8 High
- foscam c1 indoor hd camera, c1 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the...8.8 High
- foscam c1 indoor hd camera, c1 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1...8.1 High
- ibm spectrum scaleIBM GPFS (IBM Spectrum Scale 5.0.1.0 and 5.0.1.1) allows a local, unprivileged user to cause a...6.5 Medium
- dedecmsXML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized...8.8 High
- Show moreLoading…