Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
459 results · page 8 of 10
Nov 1, 2019MiniDLNA has heap-based buffer overflowCVE-2013-2739 · Other software · Readymedia Project · reported by MITRECritical 9.8
MiniDLNA has heap-based buffer overflow
- Product
- Readymedia
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurity-tracker.debian.org
Nov 1, 2019minidlna has SQL Injection that may allow retrieval of arbitrary filesCVE-2013-2738 · Other software · Readymedia Project · reported by MITRECritical 9.8
minidlna has SQL Injection that may allow retrieval of arbitrary files
- Product
- Readymedia
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.commedia.blackhat.com
Oct 31, 2019Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken through 4.8.0.3 allows attackers to cause CVE-2013-2075 · Other software · chicken · reported by Red HatHigh 8.8
Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken through 4.8.0.3 allows attackers to cause a denial of service (crash) by opening a file descriptor with a large integer value. NOTE: this issue exists because of an incomplete fix for CVE-2012-6122.
- Product
- chicken
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcode.call-cc.orgcode.call-cc.org
Sep 19, 2019libIEC61850 through 1.3.3 has a use-after-free in MmsServer_waitReady in mms/iso_mms/server/mms_server.c, as demonstrated by server_example_goose.CVE-2019-16510 · Other software · Mz-automation · reported by MITREHigh 7.5
libIEC61850 through 1.3.3 has a use-after-free in MmsServer_waitReady in mms/iso_mms/server/mms_server.c, as demonstrated by server_example_goose.
- Product
- Libiec61850
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 30, 2019Symantec My VIP portal, previous version which has already been auto updated, was susceptible to a cross-site scripting (XSS) exploit, which is a type of issue CVE-2019-12754 · Other software · Symantec Corporation · reported by secure@symantec.comMedium 4.8
Symantec My VIP portal, previous version which has already been auto updated, was susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users or potentially bypass access controls such as the same-origin policy.
- Product
- My VIP Portal
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.symantec.comsupport.symantec.com
Aug 26, 2019rustls-mio/examples/tlsserver.rs in the rustls crate before 0.16.0 for Rust allows attackers to cause a denial of service (loop of conn_event and ready) by arraCVE-2019-15541 · Other software · Rustls Project · reported by MITREHigh 7.5
rustls-mio/examples/tlsserver.rs in the rustls crate before 0.16.0 for Rust allows attackers to cause a denial of service (loop of conn_event and ready) by arranging for a client to never be writable.
- Product
- Rustls
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 17, 2019An exploitable information disclosure vulnerability exists in the KCodes NetUSB.ko kernel module that enables the ReadySHARE Printer functionality of at least tCVE-2019-5017 · Other software · Talos · reported by talos-cna@cisco.comMedium 5.3
An exploitable information disclosure vulnerability exists in the KCodes NetUSB.ko kernel module that enables the ReadySHARE Printer functionality of at least two NETGEAR Nighthawk Routers and potentially several other vendors/products. An unauthenticated, remote attacker can craft and send a packet containing an opcode that will trigger the kernel module to return several addresses. One of which can be used to calculate the dynamic base address of the module for further exploitation.
- Product
- KCodes
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comtalosintelligence.com
Jun 17, 2019An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least tCVE-2019-5016 · Other software · Talos · reported by talos-cna@cisco.comCritical 9.1
An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least two NETGEAR Nighthawk Routers and potentially several other vendors/products. A specially crafted index value can cause an invalid memory read, resulting in a denial of service or remote information disclosure. An unauthenticated attacker can send a crafted packet on the local network to trigger this vulnerability.
- Product
- KCodes
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comtalosintelligence.com
Jun 11, 2019In NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $_GET['uploaddir'] is not escaped and is passed to system() through $tmp_upload_dirCVE-2017-18378 · Network & remote access · Netgear · reported by MITREHigh 8.4
In NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $_GET['uploaddir'] is not escaped and is passed to system() through $tmp_upload_dir, leading to upgrade_handle.php?cmd=writeuploaddir remote command execution.
- Product
- Readynas Surveillance Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordkb.netgear.comexploit-db.com
May 24, 2019It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of theCVE-2019-10143 · Other software · freeradius · reported by Red HatHigh 7
It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."
- Product
- freeradius
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
May 3, 2019The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a CVE-2018-20580 · Other software · Smartbear · reported by MITREHigh 8.8
The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.
- Product
- Readyapi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comgithub.com
Apr 6, 2019Parsedown before 1.7.2, when safe mode is used and HTML markup is disabled, might allow attackers to execute arbitrary JavaScript code if a script (already runnCVE-2019-10905 · Other software · Parsedown · reported by MITREHigh 8.1
Parsedown before 1.7.2, when safe mode is used and HTML markup is disabled, might allow attackers to execute arbitrary JavaScript code if a script (already running on the affected page) executes the contents of any element with a specific class. This occurs because spaces are permitted in code block infostrings, which interferes with the intended behavior of a single class name beginning with the language- substring.
- Product
- Parsedown
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 29, 2019PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting (XSS) via the err value in a .ico picture upload.CVE-2019-9605 · Other software · Online Lottery PHP Readymade Script Project · reported by MITREMedium 5.4
PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting (XSS) via the err value in a .ico picture upload.
- Product
- Online Lottery PHP Readymade Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordhackingvila.wordpress.comhackingvila.wordpress.com
Mar 29, 2019PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Cross-Site Request Forgery (CSRF) for Edit Profile actions.CVE-2019-9604 · Other software · Online Lottery PHP Readymade Script Project · reported by MITREHigh 8.8
PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Cross-Site Request Forgery (CSRF) for Edit Profile actions.
- Product
- Online Lottery PHP Readymade Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordhackingvila.wordpress.comhackingvila.wordpress.com
Mar 21, 2019PHP Scripts Mall Charity Donation Script readymadeb2bscript has directory traversal via a direct request for a listing of an uploads directory such as the wp-coCVE-2018-20629 · Other software · Charity Donation Script Project · reported by MITREMedium 5.3
PHP Scripts Mall Charity Donation Script readymadeb2bscript has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory.
- Product
- Charity Donation Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 13, 2018PHP Scripts Mall Entrepreneur B2B Script 3.0.6 allows Stored XSS via Account Settings fields such as FirstName and LastName, a similar issue to CVE-2018-14541.CVE-2018-20138 · Other software · Readymadeb2bscript · reported by MITREMedium 5.4
PHP Scripts Mall Entrepreneur B2B Script 3.0.6 allows Stored XSS via Account Settings fields such as FirstName and LastName, a similar issue to CVE-2018-14541.
- Product
- Entrepreneur B2b Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsuku90.wordpress.comsuku90.wordpress.com
Nov 30, 2018VT-Designer Version 2.1.7.31 is vulnerable by the program reading the contents of a file (which is already in memory) into another heap-based buffer, which may CVE-2018-18983 · Other software · Invt · reported by ics-cert@hq.dhs.govHigh 8.8
VT-Designer Version 2.1.7.31 is vulnerable by the program reading the contents of a file (which is already in memory) into another heap-based buffer, which may cause the program to crash or allow remote code execution.
- Product
- Vt-designer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comics-cert.us-cert.gov
Nov 20, 2018Portainer through 1.19.2 provides an API endpoint (/api/users/admin/check) to verify that the admin user is already created.CVE-2018-19367 · Other software · Portainer · reported by MITRECritical 9.8
Portainer through 1.19.2 provides an API endpoint (/api/users/admin/check) to verify that the admin user is already created. This API endpoint will return 404 if admin was not created and 204 if it was already created. Attackers can set an admin password in the 404 case.
- Product
- Portainer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 14, 2018Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged access via local acCVE-2018-3698 · Other software · Intel Corporation · reported by secure@intel.comHigh 7.8
Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged access via local access.
- Product
- Intel Ready Mode Technology
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comintel.com
Aug 3, 2018PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields.CVE-2018-14541 · Other software · Readymadeb2bscript · reported by MITREMedium 5.4
PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields.
- Product
- Basic B2b
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgkaim.comexploit-db.com
Jun 24, 2018GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimp_CVE-2018-12713 · Other software · Gimp · reported by MITRECritical 9.1
GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimp_write_and_read_file function in app/tests/test-xcf.c. This might be leveraged by attackers to overwrite files or read file content that was intended to be private.
- Product
- Gimp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comgitlab.gnome.org
Jun 11, 2018A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts.CVE-2017-5402 · Computers, phones & browsers · Mozilla · reported by security@mozilla.orgCritical 9.8
A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts. This results in a potentially exploitable crash. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.
- Product
- Firefox
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordrhn.redhat.comrhn.redhat.com
May 30, 2018Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to mentioning the usernames that are already taken by people registCVE-2018-11565 · Other software · Mahara · reported by MITREMedium 5.3
Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to mentioning the usernames that are already taken by people registered in the system rather than masking that information.
- Product
- Mahara
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugs.launchpad.netmahara.org
May 8, 2018ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.CVE-2018-10805 · Other software · Imagemagick · reported by MITREMedium 6.5
ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
- Product
- Imagemagick
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comusn.ubuntu.com
Apr 4, 2018In alarm_ready_generic of alarm.cc, there is a possible out of bounds write due to a use after free.CVE-2017-13272 · Computers, phones & browsers · Google Inc. · reported by security@android.comCritical 9.8
In alarm_ready_generic of alarm.cc, there is a possible out of bounds write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67110137.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsource.android.com
Mar 30, 2018There is a race condition in Android for MSM, Firefox OS for MSM, and QRD Android that allows to access to already free'd memory in the debug message output funCVE-2017-9691 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comMedium 4.7
There is a race condition in Android for MSM, Firefox OS for MSM, and QRD Android that allows to access to already free'd memory in the debug message output functionality contained within the mobicore driver.
- Product
- Android for MSM, Firefox OS for MSM, QRD Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comcodeaurora.org
Mar 14, 2018The select component in bui through 2018-03-13 has XSS because it performs an escape operation on already-escaped text, as demonstrated by workGroupList text.CVE-2018-8108 · Other software · BUI Project · reported by MITREMedium 6.1
The select component in bui through 2018-03-13 has XSS because it performs an escape operation on already-escaped text, as demonstrated by workGroupList text.
- Product
- BUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2017Readymade Job Site Script has XSS via the keyword parameter to the /job URI.CVE-2017-17896 · Other software · Basic JOB Site Script Project · reported by MITREMedium 6.1
Readymade Job Site Script has XSS via the keyword parameter to the /job URI.
- Product
- Basic JOB Site Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2017Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI.CVE-2017-17895 · Other software · Basic JOB Site Script Project · reported by MITRECritical 9.8
Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI.
- Product
- Basic JOB Site Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2017Readymade Job Site Script has CSRF via the /job URI.CVE-2017-17894 · Other software · Basic JOB Site Script Project · reported by MITREHigh 8.8
Readymade Job Site Script has CSRF via the /job URI.
- Product
- Basic JOB Site Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2017Readymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edit.php fname parameteCVE-2017-17893 · Other software · Readymade Video Sharing Script Project · reported by MITREMedium 6.1
Readymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edit.php fname parameter.
- Product
- Readymade Video Sharing Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2017Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search parameter.CVE-2017-17892 · Other software · Readymade Video Sharing Script Project · reported by MITRECritical 9.8
Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search parameter.
- Product
- Readymade Video Sharing Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2017Readymade Video Sharing Script has CSRF via user-profile-edit.php.CVE-2017-17891 · Other software · Readymade Video Sharing Script Project · reported by MITREHigh 8.8
Readymade Video Sharing Script has CSRF via user-profile-edit.php.
- Product
- Readymade Video Sharing Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 18, 2017Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.CVE-2017-17649 · Other software · Readymade Video Sharing Script Project · reported by MITREMedium 6.1
Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.
- Product
- Readymade Video Sharing Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com
Dec 13, 2017Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.CVE-2017-17627 · Other software · Readymade Video Sharing Script Project · reported by MITRECritical 9.8
Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.
- Product
- Readymade Video Sharing Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com
Dec 13, 2017Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter.CVE-2017-17626 · Other software · Readymade PHP Classified Script Project · reported by MITRECritical 9.8
Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter.
- Product
- Readymade PHP Classified Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com
Dec 13, 2017Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.CVE-2017-17569 · Other software · Scubez · reported by MITREMedium 6.1
Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.
- Product
- Posty Readymade Classifieds
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 13, 2017Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the backend PHP script), which might allow remoCVE-2017-17568 · Other software · Scubez · reported by MITREHigh 7.5
Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the backend PHP script), which might allow remote attackers to obtain sensitive information via a direct request.
- Product
- Posty Readymade Classifieds
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 13, 2017Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter.CVE-2017-17567 · Other software · Scubez · reported by MITREHigh 7.5
Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter.
- Product
- Posty Readymade Classifieds
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 11, 2017Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-details.php?ID= request.CVE-2017-17111 · Other software · Scubez · reported by MITRECritical 9.8
Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-details.php?ID= request.
- Product
- Posty Readymade Classifieds
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com
Nov 22, 2017QNAP has already patched this vulnerability.CVE-2017-13071 · Network & remote access · QNAP · reported by security@qnapsecurity.com.twCritical 9.8
QNAP has already patched this vulnerability. This security concern allows a remote attacker to run arbitrary commands on the QNAP Video Station 5.1.3 (for QTS 4.3.3), 5.2.0 (for QTS 4.3.4), and earlier.
- Product
- Video Station
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 31, 2017Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.CVE-2017-15985 · Other software · Readymadeb2bscript · reported by MITRECritical 9.8
Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.
- Product
- Basic B2b Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexploit-db.comexploit-db.com
Oct 18, 2017The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypaCVE-2017-14322 · Other software · Interspire · reported by MITRECritical 9.8
The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEM_CookieLogin cookie with a specially crafted value.
- Product
- Email Marketer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordseclists.orgsecurity.infoteam.ch
Oct 14, 2017The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of add_key for a key that already exists but is uninstantiated, which allows local users toCVE-2017-15299 · Computers, phones & browsers · Linux · reported by MITREMedium 5.5
The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of add_key for a key that already exists but is uninstantiated, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted system call.
- Product
- Linux Kernel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaccess.redhat.combugzilla.redhat.com
Oct 10, 2017In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition can allow access to already freCVE-2017-9697 · Computers, phones & browsers · Google · reported by product-security@qualcomm.comHigh 7
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory while reading command registration table entries in diag_dbgfs_read_table.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsource.android.com
Oct 6, 2017QNAP has already patched this vulnerability.CVE-2017-13068 · Network & remote access · QNAP · reported by security@qnapsecurity.com.twHigh 7.5
QNAP has already patched this vulnerability. This security concern allows a remote attacker to perform an SQL injection on the application and obtain Helpdesk application information. A remote attacker does not require any privileges to successfully execute this attack.
- Product
- QNAP Helpdesk APP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 5, 2017ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.CVE-2017-15033 · Other software · Imagemagick · reported by MITREHigh 7.5
ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.
- Product
- Imagemagick
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comusn.ubuntu.com
Oct 5, 2017ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.CVE-2017-15032 · Other software · Imagemagick · reported by MITRECritical 9.8
ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
- Product
- Imagemagick
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comusn.ubuntu.com
Sep 21, 2017In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory while querying event sCVE-2017-8281 · Computers, phones & browsers · Google · reported by product-security@qualcomm.comMedium 4.7
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory while querying event status via DCI.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsource.android.com
Aug 18, 2017In all Qualcomm products with Android releases from CAF using the Linux kernel, playReady DRM failed to check a length potentially leading to unauthorized accesCVE-2015-9061 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comCritical 9.8
In all Qualcomm products with Android releases from CAF using the Linux kernel, playReady DRM failed to check a length potentially leading to unauthorized access to secure memory.
- Product
- All Qualcomm products
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsource.android.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.