|
250631
|
5.3 |
MEDIUM
Network
|
google
|
android
|
An issue was discovered on Samsung mobile devices with software through 2016-10-25 (Exynos5 chipsets). Attackers can read kernel addresses in the log because an incorrect format specifier is used. Th…
|
CWE-200
Information Exposure
|
CVE-2017-18694
|
2024-11-21 12:20 |
2020-04-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250632
|
9.8 |
CRITICAL
Network
|
google
|
android
|
An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. There is a buffer overflow in the fps sysfs entry. The Samsung ID is SVE-2016-7510 (January 20…
|
CWE-120
Classic Buffer Overflow
|
CVE-2017-18693
|
2024-11-21 12:20 |
2020-04-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250633
|
8.1 |
HIGH
Network
|
google
|
android
|
An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (MSM8939, MSM8996, MSM8998, Exynos7580, Exynos8890, or Exynos8895 chipsets) software. There is a race condition, with a result…
|
CWE-362
Race Condition
|
CVE-2017-18692
|
2024-11-21 12:20 |
2020-04-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250634
|
6.5 |
MEDIUM
Adjacent
|
syska
|
smartlight_rainbow_led_smart_bulb_firmware
|
Syska Smart Bulb devices through 2017-08-06 receive RGB parameters over cleartext Bluetooth Low Energy (BLE), leading to sniffing, reverse engineering, and replay attacks.
|
CWE-200
Information Exposure
|
CVE-2017-18642
|
2024-11-21 12:20 |
2020-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250635
|
8.1 |
HIGH
Network
|
linuxcontainers
|
lxc
|
In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers.
|
CWE-287
Improper Authentication
|
CVE-2017-18641
|
2024-11-21 12:20 |
2020-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250636
|
7.5 |
HIGH
Network
|
snakeyaml_project
fedoraproject
quarkus
oracle
|
snakeyaml
fedora
quarkus
peoplesoft_enterprise_pt_peopletools
|
The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.
|
CWE-776
XML Entity Expansion
|
CVE-2017-18640
|
2024-11-21 12:20 |
2019-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250637
|
6.1 |
MEDIUM
Network
|
progress
|
sitefinity_cms
|
Progress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News Parameter : News Title, /Content/List Parameter : List Title, /Content/Documents/LibraryDocuments/incid…
|
CWE-79
Cross-site Scripting
|
CVE-2017-18639
|
2024-11-21 12:20 |
2019-11-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250638
|
7.5 |
HIGH
Network
|
graphite_project
|
graphite
|
send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF endpoint can be used by an attacker to have the Graphite web server r…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2017-18638
|
2024-11-21 12:20 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250639
|
7.5 |
HIGH
Network
|
esafenet
|
cdg
|
CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal.
|
CWE-22
Path Traversal
|
CVE-2017-18636
|
2024-11-21 12:20 |
2019-09-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250640
|
6.1 |
MEDIUM
Network
|
novnc
debian
canonical
redhat
|
novnc
debian_linux
ubuntu_linux
openstack
|
An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as t…
|
CWE-79
Cross-site Scripting
|
CVE-2017-18635
|
2024-11-21 12:20 |
2019-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
