|
246691
|
7.7 |
HIGH
Local
|
qualcomm
|
mdm9206_firmware mdm9607_firmware mdm9635m_firmware mdm9640_firmware mdm9650_firmware mdm9655_firmware msm8909w_firmware msm8996au_firmware sd_210_firmware sd_212_firmware<…
|
Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2018-11259
|
2024-11-21 12:43 |
2018-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246692
|
7.8 |
HIGH
Local
|
qualcomm
|
sd_210_firmware sd_212_firmware sd_205_firmware sd_845_firmware sd_850_firmware
|
Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions SD 210/SD 212/SD 205, SD 845, SD 850.
|
NVD-CWE-noinfo
|
CVE-2018-11257
|
2024-11-21 12:43 |
2018-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246693
|
7.8 |
HIGH
Local
|
qualcomm
|
mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_425_firmware sd_450_firmware s…
|
In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD …
|
CWE-416
Use After Free
|
CVE-2018-11258
|
2024-11-21 12:43 |
2018-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246694
|
7.5 |
HIGH
Network
|
atlant
|
atlant
|
ATLANT (ATL) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2018-11429
|
2024-11-21 12:43 |
2018-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246695
|
7.5 |
HIGH
Network
|
genesis_vision
|
gvtoken
|
GVToken Genesis Vision (GVT) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2018-11335
|
2024-11-21 12:43 |
2018-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246696
|
8.8 |
HIGH
Network
|
dialogic
|
powermedia_xms
|
SQL injection vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote authenticated users to execute arbitrary SQL commands via the filterPattern parameter.
|
CWE-89
SQL Injection
|
CVE-2018-11643
|
2024-11-21 12:43 |
2018-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246697
|
7.8 |
HIGH
Local
|
dialogic
|
powermedia_xms
|
Incorrect Permission Assignment on the /var/www/xms/cleanzip.sh shell script run periodically in Dialogic PowerMedia XMS through 3.5 allows local users to execute code as the root user.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2018-11642
|
2024-11-21 12:43 |
2018-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246698
|
9.8 |
CRITICAL
Network
|
dialogic
|
powermedia_xms
|
Use of Hard-coded Credentials in /var/www/xms/application/controllers/gatherLogs.php in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to interact with a we…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2018-11641
|
2024-11-21 12:43 |
2018-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246699
|
9.1 |
CRITICAL
Network
|
dialogic
|
powermedia_xms
|
XML External Entity (XXE) vulnerability in the web service in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to read arbitrary files or cause a denial of service (resource consumption…
|
CWE-611
XXE
|
CVE-2018-11640
|
2024-11-21 12:43 |
2018-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246700
|
8.1 |
HIGH
Network
|
dialogic
|
powermedia_xms
|
Plaintext Storage of Passwords within Cookies in /var/www/xms/application/controllers/verifyLogin.php in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers t…
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2018-11639
|
2024-11-21 12:43 |
2018-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|