CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- arcserve udpAn issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is...7.5 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 845 firmware, sd 850 firmware +2 moreImproper access control in core module lead XBL_LOADER performs the ZI region clear for QTEE...5.5 Medium
- qualcomm, inc. snapdragon mobile, qualcomm sd 845 firmware, sd 850 firmware +2 moreUnapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +2 more +4 moreLack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon...7.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +21 more +23 moreLack of check on out of range for channels When processing channel list set command will lead to...7.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +22 more +24 moreLack of check on remaining length parameter When processing scan start command will lead to...7.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +41 more +43 moreLack of check on out of range of bssid parameter When processing scan start command will lead to...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 205 firmware, sd 210 firmware +3 more +5 moreThe use of a non-time-constant memory comparison operation can lead to timing/side channel...4.7 Medium
- qualcomm, inc. snapdragon mobile, qualcomm sd 205 firmware, sd 210 firmware +7 more +9 moreWhen FW tries to get random mac address generated from new SW RNG and ADC values read are...7.5 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +8 more +10 moreA stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +2 more +4 moreA possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in...7.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +19 more +21 morePossible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile,...7.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +23 more +25 moreWhen a series of FDAL messages are sent to the modem, a Use After Free condition can occur in...7.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9607 firmware, mdm9635m firmware +33 more +35 moreXPU Master privilege escalation is possible due to improper access control of unused...7.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm msm8909w firmware, msm8996au firmware +29 more +31 moreClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 845 firmware, sd 850 firmware +2 moreA micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary...7.1 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9607 firmware, msm8909w firmware +5 more +7 moreModem segments are unlocked after authentication, leaving modem segments open to all in...7.8 High
- qualcomm, inc. small cell soc, snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm fsm9055 firmware, ipq4019 firmware +34 more +36 moreDuring secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell...7.8 High
- purevpnThe PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreIn the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem...5.5 Medium
- libtiff, canonical ubuntu linux +1 moreAn issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function...6.5 Medium
- prayer project prayerPrayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on...4.3 Medium
- debian crossroadsCrossroads 2.81 does not properly handle the /tmp directory during a build of xr. A local...7.8 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x...8.1 High
- ruby-lang openssl, ruby, canonical ubuntu linux +2 more +4 moreRuby Openssl Allows Incorrect Value Comparison9.8 Critical
- systemd, canonical ubuntu linux, debian linux +6 more +8 moreOut-of-Bounds write in systemd-networkd dhcpv6 option handling8.8 High
- systemd, canonical ubuntu linux +1 moresystemd: chown_one() can dereference symlinks7.8 High
- systemd, canonical ubuntu linux, debian linux +1 more +3 moresystemd: reexec state injection: fgets() on overlong lines leads to line splitting7.0 High
- veritas netbackup applianceA remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows...7.2 High
- geovap reliance 4 scada/hmi, reliance 4 +1 moreReliance 4 SCADA/HMI, Version 4.7.3 Update 3 and prior. This vulnerability could allow an...6.1 Medium
- sophos hitmanpro.alert, talos sophos +1 moreAn exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality...9.3 Critical
- sophos hitmanpro.alert, talos sophos +1 moreAn exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality...4.0 Medium
- xpdfreader xpdfAn issue was discovered in Xpdf 4.00. catalog->getNumPages() in AcroForm.cc allows attackers to...5.5 Medium
- xpdfreader xpdfAn issue was discovered in Xpdf 4.00. XRef::readXRefStream in XRef.cc allows attackers to launch...5.5 Medium
389-ds-baseDebian389-ds-base - regression updateNo score- canonical ubuntu linuxThe Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows...7.8 High
- x.org x server, canonical ubuntu linux, debian linux +6 more +8 moreA flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath...6.6 Medium
- bitdefender gravityzoneThe installer for BitDefender GravityZone relies on an encoded string in a filename to determine...9.8 Critical
- neatorobotics botvac connected firmwareA command injection vulnerability in the setup API in the Neato Botvac Connected 2.2.0 allows...8.1 High
- communigate proCommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is...6.1 Medium
- polycom unified communications software, vvx 500 firmware, vvx 601 firmware +2 morePolycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to...5.9 Medium
- audiocodes 440hd firmware, 450hd firmware +1 moreAudioCodes 440HD and 450HD devices 3.1.2.89 and earlier allows man-in-the-middle attackers to...5.9 Medium
- polycom unified communications software, vvx 500 firmware, vvx 601 firmware +2 moreThe SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers...5.3 Medium
- serverscheck monitoring softwareServersCheck Monitoring Software through 14.3.3 allows local users to cause a denial of service ...6.5 Medium
- serverscheck monitoring softwareServersCheck Monitoring Software through 14.3.3 has Persistent and Reflected XSS via the sensors...6.1 Medium
- gain electronic co. ltd saga1-l8b, sagaradio saga1-l8b firmware +1 moreSAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker...6.9 Medium
- gain electronic co. ltd saga1-l8b, sagaradio saga1-l8b firmware +1 moreSAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that may allow an...8.8 High
- gain electronic co. ltd saga1-l8b, sagaradio saga1-l8b firmware +1 moreSAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command...9.1 Critical
- saltstack saltSaltStack Salt Remote command execution and incorrect access control when using salt-api9.8 Critical
- saltstack saltSaltStack Salt Directory Traversal vulnerability in salt-api5.3 Medium
- Show moreLoading…