CVEs published in November 2018
989 vulnerabilities, 150 critical, 5 exploited.
- qnap qtsImproper Authorization vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4...7.5 High
- qnap qtsNULL Pointer Dereference vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS...7.5 High
- qnap qtsCommand Injection vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3...9.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +28 more +30 morePossible buffer overflow in DRM Trusted application due to lack of check function return values...7.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, qualcomm msm8996au firmware, sd 425 firmware +12 more +14 morePossible buffer overflow in OEM crypto function due to improper input validation in Snapdragon...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +33 more +35 moreBuffer overread while decoding PDP modify request or network initiated secondary PDP activation...6.5 Medium
- qualcomm, inc. snapdragon automobile, snapdragon mobile, qualcomm msm8996au firmware, sd 450 firmware +7 more +9 morePotential buffer overflow in Video due to lack of input validation in input and output values in...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +14 more +16 moreIn the device programmer target-side code for firehose, a string may not be properly NULL...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sda660 firmware +1 more +3 moreWhile loading a service image, an untrusted pointer dereference can occur in Snapdragon Mobile in...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +14 more +16 moreWhen a malformed command is sent to the device programmer, an out-of-bounds access can occur in...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +18 more +20 moreSMMU secure camera logic allows secure camera controllers to access HLOS memory during session in...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +27 more +29 moreFailure condition is not handled properly and the correct error code is not returned. It could...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +17 more +19 morePossible buffer overflow in Ontario fingerprint code due to lack of input validation for the...7.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, qualcomm msm8996au firmware, sd 410 firmware +10 more +12 moreMissing validation check on CRL issuer name in Snapdragon Automobile, Snapdragon Mobile in...9.8 Critical
- qualcomm, inc. snapdragon automobile, snapdragon mobile, qualcomm msm8996au firmware, sd 410 firmware +3 more +5 moreRestrictions related to the modem (sim lock, sim kill) can be bypassed by manipulating the system...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +18 more +20 moreSecure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 600 firmware +1 moreBuffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in...7.8 High
- [unknown] sambaSamba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad...7.4 High
- [unknown] sambaSamba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the...7.5 High
- [unknown] sambaSamba from version 4.9.0 and before version 4.9.3 is vulnerable to a NULL pointer de-reference....6.5 Medium
- openwrt lede, openwrt +1 morecgi_handle_request in uhttpd in OpenWrt through 18.06.1 and LEDE through 17.01 has...6.1 Medium
openjdk-8Ubuntu,openjdk-ltsUbuntu +1 moreopenjdk-8, openjdk-lts regressionNo score- showdocShowdoc CSRF Vulnerability6.5 Medium
- showdocShowdoc Unauthenticated Access4.3 Medium
- huawei mate 9 pro firmware, nova 2 plus firmware, huawei technologies co., ltd. nova 2 plus, huawei mate9 pro +2 moreThere is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system...4.6 Medium
- huawei fusionsphere openstackThere is an information leakage vulnerability on several Huawei products. Due to insufficient...7.5 High
- huawei emily-al00a firmware, huawei technologies co., ltd. emily-al00a +1 moreThere is a smart SMS verification code vulnerability in some Huawei smart phones. An attacker...6.5 Medium
- huawei espace 7950 firmware, huawei technologies co., ltd. espace 7950 +1 moreThere is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote...7.4 High
- huawei espace 7950 firmware, huawei technologies co., ltd. espace 7950 +1 moreThere is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker...5.9 Medium
- huawei espace 7950 firmware, huawei technologies co., ltd. espace 7950 +1 moreThere is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An...7.4 High
- huawei honor 7a firmware, honor 9 lite firmware, huawei technologies co., ltd. honor 7a, huawei honor 9 lite +2 moreThere is an information leak vulnerability in some Huawei smartphones. An attacker may do some...4.3 Medium
- qnap qtsSecurity Advisory for Vulnerabilities in QTS7.7 High
- terra-master terramaster operating systemSystem command injection in ajaxdata.php in TerraMaster TOS 3.1.03 allows attackers to execute...8.8 High
- terra-master terramaster operating systemUser enumeration in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to list all...5.3 Medium
- terra-master terramaster operating systemCross-site scripting in Text Editor in TerraMaster TOS version 3.1.03 allows attackers to execute...6.1 Medium
- terra-master terramaster operating systemCross-site scripting in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to...8.8 High
- terra-master terramaster operating systemSystem command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to...8.8 High
- terra-master terramaster operating systemCross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to...5.4 Medium
- terra-master terramaster operating systemIncorrect access control on ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to...8.8 High
- terra-master terramaster operating systemIncorrect access controls in ajaxdata.php in TerraMaster TOS version 3.1.03 allow attackers to...6.5 Medium
- terra-master terramaster operating systemSystem command injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to...9.8 Critical
- terra-master terramaster operating systemSystem command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to...8.8 High
- terra-master terramaster operating systemSession Exposure in the web application for TerraMaster TOS version 3.1.03 allows attackers to...7.5 High
- terra-master terramaster operating systemCross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to...4.8 Medium
- terra-master terramaster operating systemSQL injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute SQL...9.8 Critical
- terra-master terramaster operating systemCross-site scripting in the web application taskbar in TerraMaster TOS version 3.1.03 allows...6.1 Medium
- terra-master terramaster operating systemSystem command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to...9.8 Critical
- terra-master terramaster operating systemSystem command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to...9.8 Critical
- terra-master terramaster operating systemCross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to...5.4 Medium
- terra-master terramaster operating systemCross-site scripting in File Manager in TerraMaster TOS version 3.1.03 allows attackers to...6.1 Medium
- Show moreLoading…