Command injection

VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters...

CVE-2018-16618

VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters...

CVE-2018-16618

VTech Storio Max devices running before 56.D3JM6 are affected by CVE-2018-16618. An exposed storeintenttranslate.x service on localhost:1668 accepts requests that combine random characters with an Android activity name; the activity name is inserted into a shell command. By injecting shell metach...

PT-2019-13007

Name of the Vulnerable Software and Affected Versions Edraw Max version 7.9.3 Description The issue is related to a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::Clear+0x0000000000000074. This suggests a problem with memory access in the Paint::Clear...

CVE-2019-12897: Out-of-bounds Read

Edraw Max 7.9.3 has a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::Clear+0x0000000000000074...

PT-2019-9357

Name of the Vulnerable Software and Affected Versions VTech Storio Max version before 56.D3JM6 Description The issue allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668, listening for requests on localhos...

CVE-2018-16618: Improper Neutralization of Special Elements used in an OS Command

VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters...

CVE-2019-12896: Out-of-bounds Write

Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77...

PT-2019-13006

Name of the Vulnerable Software and Affected Versions Edraw Max version 7.9.3 Description The issue is related to Heap Corruption, specifically starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77. Recommendations For Edraw Max version 7.9.3, at the moment, there is no information about a...

June 18, 2019—KB4501371 (OS Build 17763.592)

None None...

CVE-2019-0164: Undefined Security Weakness

Improper permissions in the installer for IntelR Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2019-6598 · Ubiquiti · Airmax Isp +2

Name of the Vulnerable Software and Affected Versions: Ubiquiti AirOS versions prior to 4.0.1 Ubiquiti AirMax ISP products versions prior to 5.3.5 Ubiquiti AirSync firmware versions prior to 5.4.5 Description: On certain Ubiquiti devices, Command Injection exists via a GET request to "stainfo.cgi...

Intel® Turbo Boost Max Technology 3.0 Advisory

Summary: A potential security vulnerability in the Intel® Turbo Boost Max Technology 3.0 driver may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation notice for the Intel® Turbo Boost Max Technology 3.0...

SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2019:1265-1)

This update for systemd fixes the following issues : Security issues fixed : CVE-2018-6954: Fixed a vulnerability in the symlink handling of systemd-tmpfiles which allowed a local user to obtain ownership of arbitrary files bsc1080919. CVE-2019-3842: Fixed a vulnerability in pamsystemd which...

kernel: Out-of-bounds access via an XFRM_MSG_MIGRATE xfrm Netlink message

The xfrmmigrate function in the net/xfrm/xfrmpolicy.c file in the Linux kernel built with CONFIGXFRMMIGRATE does not verify if the dir parameter is less than XFRMPOLICYMAX. This allows a local attacker to cause a denial of service out-of-bounds access or possibly have unspecified other impact by...

Mitsubishi QD75P1N Position Controller Detection

Binary data 754897.prm...

Mitsubishi QD75P2N Position Controller Detection

Binary data 754898.prm...

UBUNTU-CVE-2019-10742

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...

Cross-site Scripting (XSS)

cumin is vulnerable to cross-site scripting XSS. The vulnerability exists through the Max Allowance field in the Set limit form...

ASUS Zenfone V Live and Asus ZenFone 3 Max security vulnerabilities

The ASUS Zenfone V Live and the Asus ZenFone 3 Max are both Android-based smartphones from Asus Taiwan, China. The ASUS Zenfone V Live build fingerprint is asus/VZWASUSA009/ASUSA009:7.1.1/NMF26F/14.0610.1802.78-20180313:user/release-keys and the Asus ZenFone 3 Max build fingerprint is...