| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-14992 | 2.1 | The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0/NRD90M/US_Phone-14.14.1711.92-20171208:user/release-keys contains a pre-installed platform app with a package name of com.asus.dm (versionCode=1510500200, | 2020-08-24 17:37:00 | 2018-12-28 21:29:00 |
| CVE-2018-14987 | 5.6 | The MXQ TV Box 4.4.2 Android device with a build fingerprint of MBX/m201_N/m201_N:4.4.2/KOT49H/20160106:user/test-keys contains the Android framework with a package name of android (versionCode=19, versionName=4.4.2-20170213) that dynamically registe | 2020-08-24 17:37:00 | 2018-12-28 21:29:00 |
| CVE-2018-20579 | 3.6 | Contiki-NG before 4.2 has a stack-based buffer overflow in the push function in os/lib/json/jsonparse.c that allows an out-of-bounds write of an '{' or '[' character. | 2020-08-24 17:37:00 | 2018-12-28 18:29:00 |
| CVE-2018-20541 | 6.8 | There is a heap-based buffer overflow in libxsmm_sparse_csc_reader at generator_spgemm_csc_reader.c in LIBXSMM 1.10, a different vulnerability than CVE-2018-20542 (which is in a different part of the source code and is seen at different addresses). | 2020-08-24 17:37:00 | 2018-12-28 16:29:00 |
| CVE-2018-17539 | 5.0 | The BGP daemon (bgpd) in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attack via an autonomous system (AS) path containing 8 or more autonomous system number (ASN) el | 2020-08-24 17:37:00 | 2018-12-28 16:29:00 |
| CVE-2018-19616 | 6.8 | An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000. An unauthenticated user can add/edit/remove administrators because access control is implemented on the client side via a disabled attribute for a BUTTON element. | 2020-08-24 17:37:00 | 2018-12-26 21:29:00 |
| CVE-2018-18536 | 7.2 | The GLCKIo and Asusgio low-level drivers in ASUS Aura Sync v1.07.22 and earlier expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges. | 2020-08-24 17:37:00 | 2018-12-26 21:29:00 |
| CVE-2018-18535 | 7.2 | The Asusgio low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes functionality to read and write Machine Specific Registers (MSRs). This could be leveraged to execute arbitrary ring-0 code. | 2020-08-24 17:37:00 | 2018-12-26 21:29:00 |
| CVE-2018-20483 | 2.1 | set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credent | 2020-08-24 17:37:00 | 2018-12-26 18:29:00 |
| CVE-2018-20460 | 4.3 | In radare2 prior to 3.1.2, the parseOperands function in libr/asm/arch/arm/armass64.c allows attackers to cause a denial-of-service (application crash caused by stack-based buffer overflow) by crafting an input file. | 2020-08-24 17:37:00 | 2018-12-25 19:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: