CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- qualcomm, inc. snapdragon mobile, qualcomm sd 845 firmware, sd 850 firmware +2 moreLack of check of buffer size before copying in a WLAN function can lead to a buffer overflow in...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +2 more +4 moreBuffer overflow if the length of passphrase is more than 32 when setting up secure NDP connection...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd845 firmware +1 moreImproper input validation leads to buffer overwrite in the WLAN function that handles WLAN roam...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 845 firmware, sd 850 firmware +1 more +3 moreImproper input validation leads to buffer overwrite in the WLAN function that handles WMI...7.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm ipq4019 firmware, ipq8064 firmware +47 more +49 moreBuffer overwrite can happen in WLAN function while processing set pdev parameter command due to...7.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 moreBuffer overwrite can occur when the legacy rates count received from the host is not checked...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 845 firmware +1 moreLack of buffer length check before copying in WLAN function while processing FIPS event, can lead...7.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +23 more +25 moreInteger overflow may happen in WLAN when calculating an internal structure size due to lack of...7.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +22 more +24 moreInteger overflow may happen when calculating an internal structure size due to lack of validation...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 845 firmware, sd 850 firmware +1 more +3 moreBuffer overflow can happen in WLAN module due to lack of validation of the input length in...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 845 firmware, sd 850 firmware +1 more +3 moreBuffer overflow can happen in WLAN function due to lack of validation of the input length in...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 845 firmware, sd 850 firmware +2 moreBuffer overwrite can happen in WLAN due to lack of validation of the input length in Snapdragon...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +1 more +3 moreWhen processing IE set command, buffer overwrite may occur due to lack of input validation of the...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +1 more +3 moreImproper input validation in WLAN encrypt/decrypt module can lead to a buffer copy in Snapdragon...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +1 more +3 moreImproper input validation leads to buffer overwrite in the WLAN function that handles WMI...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreA bool variable in Video function, which gets typecasted to int before being read could result in...5.5 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Cachemonitor is vulnerable to cross-site...6.1 Medium
- ibm rational team concertIBM Team Concert (RTC) 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site...5.4 Medium
- ibm infosphere master data management collaboration server, infosphere master data management +1 moreIBM InfoSphere Master Data Management Collaboration Server 11.4, 11.5, and 11.6 could allow an...2.7 Low
- zzcmsAn issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs_list.php via a pxzs cookie.9.8 Critical
- zzcmsAn issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie.9.8 Critical
- zzcmsAn issue was discovered in zzcms 8.3. SQL Injection exists in admin/special_add.php via a...7.2 High
- zzcmsAn issue was discovered in zzcms 8.3. SQL Injection exists in zt/top.php via a Host HTTP header...9.8 Critical
- zzcmsAn issue was discovered in zzcms 8.3. SQL Injection exists in admin/classmanage.php via the...7.2 High
- zzcmsAn issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie.9.8 Critical
- zzcmsAn issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie.9.8 Critical
- zzcmsAn issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid...9.8 Critical
- zzcmsAn issue was discovered in zzcms 8.3. SQL Injection exists in admin/tagmanage.php via the...7.2 High
- sem-cms semcmsXSS was discovered in SEMCMS V3.4 via the semcms_remail.php?type=ok umail parameter.6.1 Medium
- dedecmsReflected XSS exists in DedeCMS 5.7 SP2 via the /member/myfriend.php ftype parameter.6.1 Medium
- dedecmsDedeCMS 5.7 SP2 allows XSS via the /member/uploads_select.php f or keyword parameter.6.1 Medium
- acme mini-httpdACME mini_httpd before 1.30 lets remote users read arbitrary files.6.5 Medium
- lulucms lulu cmsAn issue was discovered in LuLu CMS through 2015-05-14. backend\modules\filemanager\controllers...7.5 High
- openssl, canonical ubuntu linux, debian linux +19 more +21 moreTiming attack against ECDSA signature generation5.9 Medium
- cesanta mongooseAn exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing...9.1 Critical
- cesanta mongooseAn exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing...9.1 Critical
- zyxel vmg3312-b10b firmwareZyXEL VMG3312-B10B 1.00(AAPP.7) devices have a backdoor root account with the tTn3+Z@!Sr0O+...9.8 Critical
- typechoTypecho V1.1 allows remote attackers to send shell commands via base64-encoded serialized data,...9.8 Critical
- webiness project inventoryWebiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the...9.8 Critical
- gnu gettext, canonical ubuntu linux, redhat enterprise linux +2 moreAn issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in...9.8 Critical
- data tools project toolsdata-tools through 2017-07-26 has an Integer Overflow leading to an incorrect end value for the...5.5 Medium
- sandboxie-plus sandboxie** DISPUTED ** Sandboxie 5.26 allows a Sandbox Escape via an "import os" statement, followed by...10.0 Critical
- sem-cms semcmsAn XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Menu.php?lgid=1 during editing.4.8 Medium
- sem-cms semcmsAn XSS issue was discovered in SEMCMS 3.4 via the fifth text box to the admin/SEMCMS_Main.php URI.4.8 Medium
- sem-cms semcmsAn XSS issue was discovered in SEMCMS 3.4 via the second text field to the admin...4.8 Medium
- sem-cms semcmsA CSRF issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_User.php?Class=add&CF=user URI.8.8 High
- sem-cms semcmsAn XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Download.php?lgid=1 during editing.4.8 Medium
- sem-cms semcmsAn XSS issue was discovered in SEMCMS 3.4 via the first input field to the admin/SEMCMS_Link.php...4.8 Medium
- sem-cms semcmsAn XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Products.php?lgid=1 Keywords field.4.8 Medium
- sem-cms semcmsAn XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Categories.php?pid=1&lgid=1...4.8 Medium
- Show moreLoading…