| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-5805 | 6.8 | A boundary error within the "quicktake_100_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to cause a stack-based buffer overflow and subsequently cause a crash. | 2020-08-24 17:37:00 | 2018-12-07 22:29:00 |
| CVE-2018-7080 | 5.4 | A vulnerability exists in the firmware of embedded BLE radios that are part of some Aruba Access points. An attacker who is able to exploit the vulnerability could install new, potentially malicious firmware into the AP's BLE radio and could then gai | 2020-08-24 17:37:00 | 2018-12-07 21:29:00 |
| CVE-2018-16522 | 6.8 | Amazon Web Services (AWS) FreeRTOS through 1.3.1 has an uninitialized pointer free in SOCKETS_SetSockOpt. | 2020-08-24 17:37:00 | 2018-12-06 23:29:00 |
| CVE-2018-19911 | 7.6 | FreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allows remote attackers to execute arbitrary commands via the api/system or txtapi/system (or api/bg_system or txtapi/bg_system) query string on TCP port 8080, as demonstrated by an api/system?ca | 2020-08-24 17:37:00 | 2018-12-06 18:29:00 |
| CVE-2018-9565 | 5.0 | In readBytes of xltdecwbxml.c, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Produc | 2020-08-24 17:37:00 | 2018-12-06 14:29:00 |
| CVE-2018-9557 | 7.2 | In really_install_package of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for expl | 2020-08-24 17:37:00 | 2018-12-06 14:29:00 |
| CVE-2018-9548 | 2.1 | In multiple functions of ContentProvider.java, there is a possible permission bypass due to a missing URI validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for e | 2020-08-24 17:37:00 | 2018-12-06 14:29:00 |
| CVE-2018-1525 | 4.3 | IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive informat | 2020-08-24 17:37:00 | 2018-12-06 14:29:00 |
| CVE-2018-19754 | 6.5 | Tarantella Enterprise before 3.11 allows bypassing Access Control. | 2020-08-24 17:37:00 | 2018-12-05 22:29:00 |
| CVE-2018-19650 | 7.2 | Local attackers can trigger a stack-based buffer overflow on vulnerable installations of Antiy-AVL ATool security management v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit | 2020-08-24 17:37:00 | 2018-12-05 22:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: