CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- telligent communityTelligent Community 6.x, 7.x, 8.x, 9.x before 9.2.10.11796, 10.1.x before 10.1.10.11792, and 10.2...6.1 Medium
- mitel mivoice office 400A vulnerability in the web admin component of Mitel MiVoice Office 400, versions R5.0 HF3 ...6.1 Medium
- mitel mivoice 5330e firmwareThe Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet...9.8 Critical
- mitel st firmwareA vulnerability in the conferencing component of Mitel ST 14.2, versions GA29 (19.49.9400.0) and...6.1 Medium
- pippoDeserialization of Untrusted Data in Pippo9.8 Critical
- advantech webaccessAdvantech WebAccess 8.3.1 and earlier has an improper privilege management vulnerability, which...7.8 High
- advantech webaccessAdvantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external...7.5 High
- advantech webaccessAdvantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabilities...9.8 Critical
- advantech webaccessAdvantech WebAccess 8.3.1 and earlier has a path traversal vulnerability which may allow an...9.8 Critical
- alibaba fastjson, pippo +1 moreImproper Input Validation in alilibaba:fastjson9.8 Critical
- phpyunAn issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or...7.5 High
- bijiadao waimai super cmsAn issue was discovered in Waimai Super Cms 20150505. There is XSS via the index.php?m=public&a...6.1 Medium
- dedecmsDedeCMS 5.7 SP2 allows XSS via the function named GetPageList defined in the include/datalistcp...6.1 Medium
- microsoft yammer, yammer desktop app +1 moreA remote code execution vulnerability exists in the Yammer desktop application due to the loading...7.8 High
- gnu binutils, debian linux, netapp data ontap +2 moreAn issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD)...5.5 Medium
- gnu binutils, debian linux, netapp data ontap +2 moreAn issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor ...5.5 Medium
- gnu binutils, debian linux, netapp data ontap +2 moreA heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge...5.5 Medium
- micro focus microfocus real user monitoring, microfocus real user monitoring +1 moreMFSBGN03827 rev.1 - Microfocus Real User Monitoring 9.4.0 BPRDownload Java Deserialization Vulnerability6.3 Medium
- 360totalsecurity 360 total security** DISPUTED ** 360 Total Security 3.5.0.1033 allows a Sandbox Escape via an "import os" statement...6.3 Medium
- guardianproject stegdetectStegdetect through 2018-05-26 has an out-of-bounds write in f5_compress in the f5.c file.8.8 High
- huawei alp-al00b-rsc firmware, alp-al00b firmware, bla-tl00b firmware +3 more +5 moreSome Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0...4.6 Medium
- trend micro antivirus for mac (consumer), trendmicro antivirus for mac 2017, antivirus for mac 2018 +1 more +3 moreA KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro...7.8 High
- trend micro antivirus for mac (consumer), trendmicro antivirus for mac 2017, antivirus for mac 2018 +1 more +3 moreA KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro...7.8 High
- trend micro antivirus for mac (consumer), trendmicro antivirus for mac 2017, antivirus for mac 2018 +1 more +3 moreA KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro...7.8 High
- trend micro antivirus for mac (consumer), trendmicro antivirus for mac 2017, antivirus for mac 2018 +1 more +3 moreA ctl_set KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend...7.8 High
- trend micro antivirus for mac (consumer), trendmicro antivirus for mac 2017, antivirus for mac 2018 +1 more +3 moreA UrlfWTPPagePtr KERedirect Use-After-Free Privilege Escalation vulnerability in Trend Micro...7.8 High
- atlassian jira, jira server +1 moreMany resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5,...6.1 Medium
- atlassian jira, jira server +1 moreThe XsrfErrorAction resource in Atlassian Jira before version 7.6.9, from version 7.7.0 before...6.1 Medium
- atlassian jira, jira server +1 moreSeveral administrative resources in Atlassian Jira before version 7.6.9, from version 7.7.0...4.7 Medium
- qualcomm msm8909w firmware, sd 205 firmware, sd 210 firmware +8 more +10 moreUnder certain mode of operations, HLOS may be able get direct or indirect access through DXE...5.3 Medium
- qualcomm, inc. snapdragon automobile, snapdragon mobile, qualcomm msm8996au firmware, sd 410 firmware +7 more +9 moreWhile accessing SafeSwitch services, third party can manipulate a given device and perform...7.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +5 more +7 moreXBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse...7.0 High
- qaulcomm fsm9055 firmware, qualcomm mdm9206 firmware, mdm9607 firmware +24 more +26 moreInsufficient memory allocation in boot due to incorrect size being passed could result in out of...7.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +24 more +26 moreWhile processing the sensors registry configuration file, if inputs are not validated a buffer...7.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +6 more +8 moreSecure display content could be accessed by third party trusted application after creating a...5.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +17 more +19 moreImproper translation table consolidation logic leads to resource exhaustion and QSEE error in...5.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +24 more +26 moreLack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile,...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 425 firmware, sd 430 firmware +5 more +7 moreDouble memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD...7.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +22 more +24 moreAccess control on applications is not applied while accessing SafeSwitch services can lead to...7.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +17 more +19 morePossible buffer overflow if input is not null terminated in DSP Service module in Snapdragon...7.8 High
- qualcomm, inc. small cell soc, snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm fsm9055 firmware, mdm9206 firmware +22 more +24 moreWhile reading file class type from ELF header, a buffer overread may happen if the ELF file size...7.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +12 more +14 moreWhen a particular GPIO is protected by blocking access to the corresponding GPIO resource...7.8 High
- qualcomm msm8909w firmware, msm8996au firmware, sd 205 firmware +19 more +21 moreSecure app running in non secure space can restart TZ by calling Widevine app API repeatedly in...5.5 Medium
- qualcomm, inc. snapdragon mobile, qualcomm qca9379 firmware, sd 205 firmware +7 more +9 morePossible memory corruption when Read Val Blob Req is received with invalid parameters in...6.5 Medium
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +12 more +14 moreNon-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in...7.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +21 more +23 moreWhen dynamic memory allocation fails, currently the process sleeps for one second and continues...5.5 Medium
- qualcomm, inc. snapdragon automobile, snapdragon mobile, qualcomm mdm9635m firmware, sd 400 firmware +22 more +24 moreIn a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm qca9379 firmware, sd 205 firmware +23 more +25 moreImproper input validation for GATT data packet received in Bluetooth Controller function can lead...8.8 High
- qualcomm, inc. snapdragon mobile, qualcomm qca9379 firmware, sd 205 firmware +23 more +25 moreImproper input validation in Bluetooth Controller function can lead to possible memory corruption...8.8 High
- bigprof appginiBigProf AppGini 5.70 stores the passwords in the database using the MD5 hash.5.3 Medium
- Show moreLoading…