CVE-2018-9413

creationtimestamp| type| source ---|---|--- 2024-12-02 21:10:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113585278890950270 2024-12-02 22:56:33+00:00| seen| https://t.me/cvedetector/11825...

CVE-2018-9376

creationtimestamp| type| source ---|---|--- 2024-12-02 21:10:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113585278873943519 2024-12-02 22:56:29+00:00| seen| https://t.me/cvedetector/11824...

CVE-2018-9414

CVE-2018-9414 affects Google Pixel/Android Bluetooth stack. The issue is in the native function gattServerSendResponseNative (com_android_bluetooth_gatt.cpp), where a missing bounds check allows an out-of-bounds stack write. This can lead to local elevation of privilege with user execution privil...

CVE-2018-9413

In handlenotificationresponse of btifrc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2018-9413

In handlenotificationresponse of btifrc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2018-9381

In gattsprocessreadbytypereq of gattsr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9381

CVE-2018-9381 affects the gatt_sr.c component, specifically the gatts_process_read_by_type_req path, where uninitialized data can cause information disclosure. The issue enables remote information disclosure without additional execution privileges and requires no user interaction. Publicly disclo...

CVE-2018-9381

In gattsprocessreadbytypereq of gattsr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9380

In l2clccprocpdu of l2cfcr.cc, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2018-9380

In l2clccprocpdu of l2cfcr.cc, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

Security Bulletin: A vulnerability in Microsoft .NET Core may affect IBM Robotic Process Automation and result in a remote attacker obtaining sensitive information (CVE-2018-8292).

Summary Microsoft .NET Core is used by IBM Robotic Process Automation as part of the development platform CVE-2018-8292. Vulnerability Details CVEID:CVE-2018-8292 DESCRIPTION: Microsoft .NET Core could allow a remote attacker to obtain sensitive information, caused by an open redirect...

Eaton 9PX Insufficiently Protected Credentials (CVE-2018-9280)

An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the SNMP version 3 user's password. The web page displayed by the appliance contains the password in cleartext. Passwords of the read and write users could be retrieved by browsing the source code of the webpage. Th...

CVE-2018-9377

In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9377

In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9377

In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9377

CVE-2018-9377 affects Android’s ActivityManagerService.getIntentForIntentSender, enabling local escalation of privilege via a pending Intent to access user metadata with no user interaction. The issue is tied to the getIntentForIntentSender path and can be exploited locally without extra privileg...

CVE-2018-9374

In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9374

In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9374

CVE-2018-9374 affects Android’s PackageManagerService.java, specifically installPackageLI, enabling a possible permissions bypass that could lead to local elevation of privilege. Exploitation would require local user privileges with no user interaction, per the CVE description. The issue is liste...

CVE-2018-9351

In ih264efmtconv420pto420sp of ih264efmtconv.c there is a possible out of bound read due to missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation...