PT-2019-8660

Name of the Vulnerable Software and Affected Versions Vera VeraEdge version 1.7.19 Vera Veralite version 1.7.481 Description An issue was discovered in the UPnP services provided by the devices, which are available on port 3480 and can also be accessed via port 80 using the url "/port 3480". The...

CVE-2018-11947

The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and...

CVE-2018-11947: Double Free

The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and...

PT-2018-15279

Name of the Vulnerable Software and Affected Versions i-doit open version 1.11.2 Description The issue allows for Remote Code Execution due to the mishandling of ZIP archives. It involves an upload feature that permits an authenticated administrator to upload arbitrary files to the main website...

PT-2018-18997

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.1 Description The issue is related to a missing bounds check in the gatts process attribute req function of gatt sc.cc, which could lead to a read of uninitialized data. This might result in remote information...

CVE-2017-18283

Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660...

CVE-2017-18283

CVE-2017-18283 describes a memory corruption issue in Qualcomm Snapdragon mobile platform components triggered by Read Val Blob Req with invalid parameters. Affected are Snapdragon variants QCA9379 and SD series: 210/212/205, 625, 835, 845, 850, and SDA660. The vulnerability context in the connec...

CVE-2017-18283: Improper Restriction of Operations within the Bounds of a Memory Buffer

Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660...

PT-2018-6800

Name of the Vulnerable Software and Affected Versions: Snapdragon Mobile versions QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660 Description: The issue is related to possible memory corruption when a Read Val Blob Req is received with invalid parameters. Recommendations: Fo...

PT-2018-10188

Name of the Vulnerable Software and Affected Versions glusterfs affected versions not specified Description A flaw was found in the RPC request using gfs3 lookup req in the glusterfs server. This issue allows an authenticated attacker to leak information and execute a remote denial of service by...

PT-2018-10187

Name of the Vulnerable Software and Affected Versions glusterfs server affected versions not specified Description A flaw was found in RPC request using gfs3 mknod req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path...

PT-2018-10189

Name of the Vulnerable Software and Affected Versions glusterfs server affected versions not specified Description A flaw was found in the RPC request using gfs3 symlink req in the glusterfs server, allowing symlink destinations to point to file paths outside of the gluster volume. An authenticat...

PT-2018-10190

Name of the Vulnerable Software and Affected Versions glusterfs server affected versions not specified Description A flaw was found in the RPC request using gfs2 create req in the glusterfs server. An authenticated attacker could use this flaw to create arbitrary files and execute arbitrary code ...

PT-2018-10191

Name of the Vulnerable Software and Affected Versions glusterfs affected versions not specified Description A flaw was found in the RPC request using gfs3 rename req in the glusterfs server. An authenticated attacker could use this flaw to write to a destination outside the gluster volume...

PT-2018-1622

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9.0 Description The issue is related to a possible out of bounds read in the mca ccb hdl req function of mca cact.cc. This could lead to remote information disclosure over Bluetooth with no additional execution...

Threat Outbreak Alert RuleID32941: Email Messages Distributing Malicious Software on June 11, 2018

Medium Alert ID: 58139 First Published: 2018 June 11 21:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32941 may contain the following files: Name | Siz...

PT-2018-5542

Name of the Vulnerable Software and Affected Versions: Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 Description: The issue is related to an out of bounds write in the process service search attr req function due to a missing bounds check. This could potentially lead to remote...

PT-2018-5569

Name of the Vulnerable Software and Affected Versions: Android versions 6.0 through 8.1 Description: The issue is related to an out of bounds read in the sdp server handle client req function due to a missing bounds check. This could lead to local information disclosure without requiring addition...

CVE-2017-9710

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, IOCTL interface to send QMI NOTIFY REQ messages can be called from multiple contexts which can result in buffer overflow of msg cache...

Buffer overflow

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, IOCTL interface to send QMI NOTIFY REQ messages can be called from multiple contexts which can result in buffer overflow of msg cache...