PT-2018-19011

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 8.1 Description The issue is related to a possible out of bounds read in the avct bcb msg ind function of avct bcb act.cc due to a missing bounds check. This could lead to remote information disclosure without...

PT-2018-17170

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-06-05 Description: A buffer overflow can potentially occur while processing the HTT T2H MSG TYPE MGMT TX COMPL IND message in Android releases that use the linux kernel. Recommendations: For...

PT-2018-5546

Name of the Vulnerable Software and Affected Versions: Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 Description: The issue is related to a possible out of bounds read in the bnep data ind function of bnep main.cc due to a missing bounds check. This could lead to remote...

PT-2018-5548

Name of the Vulnerable Software and Affected Versions: Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 Description: The issue is related to a possible out of bounds read in the bnep data ind function of bnep main.cc. This could lead to remote information disclosure without requiri...

PT-2018-17164

Name of the Vulnerable Software and Affected Versions: Qualcomm Android for MSM versions prior to security patch level 2018-04-05 Firefox OS for MSM versions prior to security patch level 2018-04-05 QRD Android versions prior to security patch level 2018-04-05 Description: A buffer overflow issue...

CVE-2018-5970

SQL Injection exists in the JGive 2.0.9 component for Joomla! via the filterorgindtype or campaigncountries parameter...

PT-2018-17256

Name of the Vulnerable Software and Affected Versions: JGive version 2.0.9 Description: A SQL Injection issue exists in the JGive component for Joomla, specifically via the filter org ind type or campaign countries parameter. Recommendations: For JGive version 2.0.9, update to a newer version tha...

CVE-2006-4665: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in MKPortal M1.1 Rc1 allows remote attackers to inject arbitrary web script or HTML via the ind parameter, possibly related to the PHPSELF variable. NOTE: Some details are obtained from third party information...

CVE-2006-3554

CVE-2006-3554 affects MKPortal 1.0.1 Final and is a directory traversal vulnerability in index.php. The underlying flaw allows remote attackers to include and execute arbitrary local files by manipulating directory traversal sequences in the language cookie, demonstrated by injecting PHP sequence...