PT-2018-10231

Name of the Vulnerable Software and Affected Versions LilyPond version 2.19.80 Description The issue allows remote attackers to conduct argument-injection attacks via a crafted URL. This is because the lilypond-invoke-editor in LilyPond does not validate strings before launching the program...

CVE-2018-2718

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...

PT-2018-15854

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1 Description The issue is related to a vulnerability in the Java VM component of Oracle Database Server. This vulnerability is difficult to exploit and allows a low-privileged attacke...

CVE-2016-10498

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, MDM9645, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SDM630, SDM636, SDM660, and...

Code injection

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, MDM9645, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SDM630, SDM636, SDM660, and...

CVE-2015-9141

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 800, SD 808, and SD 810, in HHO scenarios, during the ACQ...

PT-2018-4477

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to memory corruption due to buffer overflow in certain Qualcomm Snapdragon Mobile and Snapdragon Wear chipsets, specifically in HHO scenarios during the...

CVE-2016-10498: Improper Neutralization of Special Elements in Output Used by a Downstream Component

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, MDM9645, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SDM630, SDM636, SDM660, and...

Oracle Sun Solaris has an unspecified vulnerability (CNVD-2018-09045)

Oracle Sun Solaris is a Unix operating system originally developed by Sun Microsystems. An unspecified vulnerability exists in the RPC component of Oracle Sun Solaris. An attacker could exploit this vulnerability to affect availability...

CVE-2015-9141: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 800, SD 808, and SD 810, in HHO scenarios, during the ACQ...

PT-2018-4694

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue occurs when the DTR is stopped prematurely, causing the micro kernel to become stuck. This can be triggered by a timing change injectable in the RACH procedure...

CVE-2017-2871

Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. An attacker who is in the same subnetwork of the camera or has remote administrator access can fully compromise the device by performing a firmware recovery...

April 17, 2018—KB4093121 (Preview of Monthly Rollup)

None None...

Foscam IP Video Camera Firmware Recovery Unsigned Image Vulnerability

Summary Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. An attacker who is in the same subnetwork of the camera or has remote administrator access, can fully compromise the device by performing a firmware...

Twonky Server Directory Traversal Vulnerability

Twonky Server is the industry-leading DLNA/UPnP media server from Lynx Technology that enables the sharing of media content between connected devices. A directory traversal vulnerability exists in Twonky Server. A remote attacker could use the contentbase parameter of rpc/setall in the ... double...

PT-2018-1119 · Siemens · Simatic Route Control +7

Name of the Vulnerable Software and Affected Versions: OpenPCS 7 versions V7.1 through V8.2, V9.0 through V9.0 Upd1 SIMATIC BATCH versions V7.1 through V8.2, V9.0 through V9.0 SP1 SIMATIC NET PC Software versions V14 through V14 SP1 Update 14, V15 through 15 SP1 SIMATIC PCS 7 versions V7.1 throug...

mysql: Stored Procedure unspecified vulnerability (CPU Jan 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Stored Procedure. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...

mysql: Stored Procedure unspecified vulnerability (CPU Jan 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Stored Procedure. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...

The vulnerability of the Samba networking communication package lies in the lack of input data validation, which allows attackers to trigger a service failure.

The vulnerability of the Samba networking communication package is related to the lack of input data validation during RPC spoolss calls if RPC spoolss is configured to run as an external daemon. Exploiting this vulnerability allows a malicious actor to cause a failure in the print queue manager’...

AZL-7345 CVE-2018-1050 affecting package samba for versions less than 4.12.5-6

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash...