Race condition

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, a race condition while accessing num of clients in DIAG services can lead to out of boundary access...

CVE-2018-11897

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, while processing diag event after associating to a network out of bounds read occurs if ssid of the network joined is greater than max limit...

CVE-2018-5905

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, a race condition while accessing num of clients in DIAG services can lead to out of boundary access...

PT-2018-10893

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue occurs in the Linux kernel when processing a diag event after connecting to a...

PT-2018-17229

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition exists while accessing the number of clients in DIAG services, which can lead to out of boundary access. This issue affects Android releases, including Android for MSM...

CVE-2018-11897: Out-of-bounds Read

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, while processing diag event after associating to a network out of bounds read occurs if ssid of the network joined is greater than max limit...

CVE-2018-15728

Couchbase Server exposed the '/diag/eval' endpoint which by default is available on TCP/8091 and/or TCP/18091. Authenticated users that have 'Full Admin' role assigned could send arbitrary Erlang code to the 'diag/eval' endpoint of the API and the code would subsequently be executed in the...

Code injection

Couchbase Server exposed the '/diag/eval' endpoint which by default is available on TCP/8091 and/or TCP/18091. Authenticated users that have 'Full Admin' role assigned could send arbitrary Erlang code to the 'diag/eval' endpoint of the API and the code would subsequently be executed in the...

CVE-2018-15728

Couchbase Server exposed the '/diag/eval' endpoint which by default is available on TCP/8091 and/or TCP/18091. Authenticated users that have 'Full Admin' role assigned could send arbitrary Erlang code to the 'diag/eval' endpoint of the API and the code would subsequently be executed in the...

CVE-2018-15728: Improper Control of Generation of Code

Couchbase Server exposed the '/diag/eval' endpoint which by default is available on TCP/8091 and/or TCP/18091. Authenticated users that have 'Full Admin' role assigned could send arbitrary Erlang code to the 'diag/eval' endpoint of the API and the code would subsequently be executed in the...

PT-2018-13175

Name of the Vulnerable Software and Affected Versions Couchbase Server versions 4.0.0 through 5.5.1 Description The issue allows authenticated users with the 'Full Admin' role to execute arbitrary Erlang code on the underlying operating system with the privileges of the user running Couchbase. Th...

Couchbase Server Remote Code Execution Vulnerability

Couchbase Server allows for authenticated users to send arbitrary erlang code to diag/eval. Couchbase Server Remote Code Execution Vulnerability Description: Couchbase Server 1 exposes REST API 2 which by default is available on TCP/8091 and/or TCP/18091. Authenticated users can send arbitrary...

UBUNTU-CVE-2017-7558

A kernel data leak due to an out-of-bound read was found in the Linux kernel in inetdiagmsgsctp,laddrfill and sctpgetsctpinfo functions present since version 4.7-rc1 through version 4.13. A data leak happens when these functions fill in sockaddr data structures used to export socket's diagnostic...

PT-2018-11479

Name of the Vulnerable Software and Affected Versions Electro Industries GaugeTech Nexus devices affected versions not specified Description The issue allows remote attackers to obtain potentially sensitive information by making a direct request for specific URI endpoints, including "meter...

Security Bulletin: PowerKVM is affected by ppc64-diag and powerpc-utils vulnerabilities (Multiple CVEs)

Summary PowerKVM is affected by multiple vulnerabilities in ppc64-diag and powerpc-utils. Vulnerability Details CVEID: CVE-2014-4038 DESCRIPTION: ppc64-diag could allow a local attacker to launch a symlink attack. lpdelatest.sh creates temporary files insecurely. A local attacker could exploit th...

Google Android Qualcomm Component Information Disclosure Vulnerability (CNVD-2018-12657)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in the Google Android Qualcomm component Diag driver. An attacker can exploit this vulnerability to obtain information...

SAP DIAG Service Detection

A SAP DIAG Dynamic Information and Action Gateway Service is running at this host. DIAG is a propretiary communication protocol between the SAP GUI and the SAP application server. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...

CVE-2018-10562

An issue was discovered on Dasan GPON home routers. Command Injection can occur via the desthost parameter in a diagaction=ping request to a GponForm/diagForm URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it's quite simple to...

PT-2018-2613

Name of the Vulnerable Software and Affected Versions Dasan GPON Routers affected versions not specified Description An issue was discovered on Dasan GPON home routers where Command Injection can occur via the dest host parameter in a "diag action=ping" request to a "GponForm/diag Form" URI. The...

GPon Router Remote Command Execution Vulnerability

Dasan GPON is a home router product from Dasan Korea. A command injection vulnerability exists in the Dasan GPON Home Router that originates when a user revisits the /diag.html page where the router saves the results of the Internet Packet Explorer in /tmp and transmits it to the user. An attacke...