CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- google androidIn copy_process of fork.c, there is possible memory corruption due to a double free. This could...7.8 High
- google androidIn ipSecSetEncapSocketOwner of XfrmController.cpp, there is a possible failure to initialize a...5.5 Medium
- google androidIn smp_proc_enc_info of smp_act.cc, there is a possible out of bounds read due to a missing...6.5 Medium
- google androidIn smp_proc_master_id of smp_act.cc, there is a possible out of bounds read due to a missing...6.5 Medium
- google androidIn smp_process_keypress_notification of smp_act.cc, there is a possible out of bounds read due to...6.5 Medium
- google androidIn bta_av_proc_meta_cmd of bta_av_act.cc, there is a possible out of bounds read due to an...6.5 Medium
- google androidIn avrc_msg_cback of avrc_api.cc, there is a possible out-of-bound read due to a missing bounds...6.5 Medium
- google androidIn mca_ccb_hdl_req of mca_cact.cc, there is a possible out of bounds read due to a missing bounds...6.5 Medium
- google androidIn sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds write due to an...8.8 High
- google androidIn rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out of bounds read due to a...7.5 High
- google androidIn rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out-of-bounds read due to a...6.5 Medium
- google androidIn the SetupWizard, there is a possible Factory Reset Protection bypass due to a permissions...7.8 High
- google androidIn readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data. This...5.5 Medium
- google androidIn SkSampler::Fill of SkSampler.cpp, there is a possible out of bounds write due to an integer...7.8 High
- google androidIn impeg2_fmt_conv_yuv420p_to_yuv420sp_uv_av8 of impeg2_format_conv.s there is a possible out of...7.8 High
- google androidIn ixheaacd_real_synth_fft_p3 of ixheaacd_esbr_fft.c there is a possible out of bounds write due...7.8 High
- google androidIn the content provider of the download manager, there is a possible SQL injection due to...5.5 Medium
- google androidIn checkGrantUriPermissionLocked of ActivityManagerService.java, there is a possible permissions...7.8 High
- google androidIn AMediaCodecCryptoInfo_new of NdkMediaCodec.cpp, there is a possible out-of-bounds write due to...7.8 High
- google androidIn CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type...7.8 High
- google androidIn avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper...9.8 Critical
- google androidIn ihevcd_parse_sei_payload of ihevcd_parse_headers.c, there is a possible out-of-bounds write...7.8 High
- google androidIn getOffsetForHorizontal of Layout.java, there is a possible application hang due to a slow...5.5 Medium
- puppet cisco iosPrevious releases of the Puppet cisco_ios module output SSH session debug information including...5.5 Medium
- puppet cisco ios modulePrevious releases of the Puppet cisco_ios module did not validate a host's identity before...6.5 Medium
- puppet device managerPrevious releases of the Puppet device_manager module creates configuration files containing...7.8 High
- jeesnsAn issue was discovered in JEESNS 1.3. The XSS filter in com.lxinet.jeesns.core.utils...5.4 Medium
- gwolle guestbook project guestbookXSS exists in admin/gb-dashboard-widget.php in the Gwolle Guestbook (gwolle-gb) plugin before 2.5...6.1 Medium
- d-link dir-823g firmwareOn D-Link DIR-823G devices, the GoAhead configuration allows /HNAP1 Command Injection via shell...9.8 Critical
- d-link dir-823g firmwareOn D-Link DIR-823G devices, ExportSettings.sh, upload_settings.cgi, GetDownLoadSyslog.sh, and...9.8 Critical
- zohocorp manageengine assetexplorerIn Zoho ManageEngine AssetExplorer, a Stored XSS vulnerability was discovered in the 6.2.0...6.1 Medium
- fork-cms fork cmsIn the 5.4.0 version of the Fork CMS software, HTML Injection and Stored XSS vulnerabilities were...6.1 Medium
- airties air 5443v2 firmwareAirTies Air 5443v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype...6.1 Medium
- airties air 5453 firmwareAirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype...6.1 Medium
- airties air 5343v2 firmwareAirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype...6.1 Medium
- airties air 5442 firmwareAirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype...6.1 Medium
- airties air 5650 firmwareAirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype...6.1 Medium
- airties air 5021 firmwareAirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype...6.1 Medium
- airties air 5750 firmwareAirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype...6.1 Medium
- djangoproject djangoDjango allows unprivileged users to read the password hashes of arbitrary accounts4.9 Medium
- mensamaxAn issue was discovered in the MensaMax (aka com.breustedt.mensamax) application 4.3 for Android....7.5 High
- mensamaxAn issue was discovered in the MensaMax (aka com.breustedt.mensamax) application 4.3 for Android....8.1 High
- intelliants subrionSubrion CMS Stored Cross-site Scripting (XSS)6.1 Medium
- nvidia geforce experienceNVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled where...2.5 Low
- nvidia geforce experienceNVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled which...7.0 High
- ibm rational quality managerIBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross...5.4 Medium
- ibm rational quality managerIBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross...5.4 Medium
- ibm rational quality managerIBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross...5.4 Medium
- ibm rational quality managerIBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross...5.4 Medium
- ibm multi-cloud data encryptionIBM Multi-Cloud Data Encryption (MDE) 2.1 could allow an unauthorized user to manipulate data due...3.7 Low
- Show moreLoading…