Browse CVEs

MEDIUM 6.5 CVE-2018-18352 Service works could inappropriately gain access to cross origin audio in Media in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to by… Chrome 71.0.3578.80+ Fix from $1,6002018-12-11 HIGH 7.8 CVE-2018-6755 Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbit… True Key after 5.1.230.7 Fix from $1,9502018-12-06 CRITICAL 9.8 CVE-2018-14703 Incorrect access control in the /mysql/api/droboapp/data endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to retr… 5n2 Firmware No fix yet Fix from $2,3002018-12-03 MEDIUM 6.1 CVE-2018-19836 In Metinfo 6.1.3, include/interface/applogin.php allows setting arbitrary HTTP headers (including the Cookie header), and common.inc.php allows regis… Metinfo No fix yet Fix from $1,6002018-12-03 HIGH 7.5 CVE-2018-15835 Android 1.0 through 9.0 has Insecure Permissions. The Android bug ID is 77286983. Android after 9.0 Fix from $1,9502018-11-30 MEDIUM 6.5 CVE-2018-15768EPSS 9% Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configur… Openmanage Network Manager 6.5.0+ Fix from $1,6002018-11-30 MEDIUM 5.5 CVE-2018-11002 Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions. Pulse Secure Desktop Client No fix yet Fix from $1,6002018-11-29 MEDIUM 6.5 CVE-2018-13355 Incorrect access controls in ajaxdata.php in TerraMaster TOS version 3.1.03 allow attackers to create user groups without proper authorization. Terramaster Operating System No fix yet Fix from $1,6002018-11-27 HIGH 7.8 CVE-2018-11914 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper access control can lead to device… Android Patch available Fix from $1,9502018-11-27 HIGH 7.8 CVE-2018-11907 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper access control can lead to device… Android Patch available Fix from $1,9502018-11-27 HIGH 7.8 CVE-2018-11908 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper access control can lead to device… Android Patch available Fix from $1,9502018-11-27 HIGH 7.8 CVE-2018-11909 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper access control can lead to device… Android Patch available Fix from $1,9502018-11-27 HIGH 7.8 CVE-2018-11910 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper access control can lead to device… Android Patch available Fix from $1,9502018-11-27 HIGH 7.8 CVE-2018-11913 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper configuration of dev nodes may le… Android Patch available Fix from $1,9502018-11-27 HIGH 8.8 CVE-2018-13321 Incorrect access controls in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allow attackers to call dangerous internal functions via the "method" pa… Ts5600d1206 Firmware No fix yet Fix from $1,9502018-11-26 HIGH 8.0 CVE-2018-18561 An issue was discovered in Roche Accu-Chek Inform II Base Unit / Base Unit Hub before 03.01.04 and CoaguChek / cobas h232 Handheld Base Unit before 0… Accu Chek Inform Ii Firmware 03.01.04+ Fix from $1,9502018-11-20 MEDIUM 6.5 CVE-2018-14934 The Bluetooth subsystem on Polycom Trio devices with software before 5.5.4 has Incorrect Access Control. An attacker can connect without authenticati… Trio 8500 Firmware 5.5.4+ Fix from $1,6002018-11-15 HIGH 8.8 CVE-2018-6057 Lack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process t… Chrome 65.0.3325.146+ Fix from $1,9502018-11-14 HIGH 7.8 CVE-2018-3697 Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escalation of… Media Server Studio Mitigation only Fix from $1,9502018-11-14 HIGH 7.8 CVE-2018-2489 Locally, without any permission, an arbitrary android application could delete the SSO configuration of SAP Fiori Client. SAP Fiori Client version 1.… Fiori Client 1.11.5+ Fix from $1,9502018-11-13 HIGH 7.8 CVE-2018-2490 The broadcast messages received by SAP Fiori Client are not protected by permissions. SAP Fiori Client version 1.11.5 in Google Play store addresses … Fiori Client 1.11.5+ Fix from $1,9502018-11-13 HIGH 7.8 CVE-2018-19071 An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Fir… I5 Application Firmware No fix yet Fix from $1,9502018-11-07 MEDIUM 5.5 CVE-2018-19072 An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Fir… I5 Application Firmware No fix yet Fix from $1,6002018-11-07 MEDIUM 5.5 CVE-2016-2121 A permissions flaw was found in redis, which sets weak permissions on certain files and directories that could potentially contain sensitive informat… Openstack Mitigation only Fix from $1,6002018-10-31 HIGH 7.8 CVE-2018-10709 The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and Rest… A Tuning 1.0.6.2 / 1.0.35.1+ Fix from $1,9502018-10-30 HIGH 7.1 CVE-2018-10710 The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and Rest… A Tuning 1.0.6.2 / 1.0.35.1+ Fix from $1,9502018-10-30 HIGH 7.8 CVE-2018-10712 The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and Rest… A Tuning 1.0.6.2 / 1.0.35.1+ Fix from $1,9502018-10-30 MEDIUM 5.5 CVE-2018-11951 Improper access control in core module lead XBL_LOADER performs the ZI region clear for QTEE instead of XBL_SEC in Snapdragon Mobile in version SD 84… Sd 845 Firmware Mitigation only Fix from $1,6002018-10-26 HIGH 7.8 CVE-2018-18654 Crossroads 2.81 does not properly handle the /tmp directory during a build of xr. A local attacker can first create a world-writable subdirectory in … Crossroads Mitigation only Fix from $1,9502018-10-26 CRITICAL 9.8 CVE-2018-11792 In Apache Impala before 3.0.1, ALTER TABLE/VIEW RENAME required ALTER on the old table. This may pose a potential security risk, such as having ALTER… Impala 3.0.1+ Fix from $2,3002018-10-24