CVEs published February 25, 2019
55 CVEs were published on February 25, 2019: 0 critical, 1 high. Browse them by severity, product and exploitation status.
- Published
- 55
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 53
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 12
- Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- 4
- Cisco Small Business SPA500 Series IP Phones · Cisco Sma… +2
- 1
- Cisco Webex Teams
- 1
- Flexera Software FlexNet Publisher
- 1
- irisnet-crypto
- 1
- org.b3log:symphony
- 1
- Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- 1
High 1
Medium, low and unrated 54
- CVE-2018-11289Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a buffer overflow in…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11820Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11845Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11864Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11931Improper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11932Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11935Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11938Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11945Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11948Exceeding the limit of usage entries are not tracked and the information will be lost causing the content to lose continuity in Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13900Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-13904Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Snapdragon Compute…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13905KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-13912Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- CVE-2018-13913Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT…Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-13914Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer…Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-20063An issue was discovered in Gurock TestRail 5.6.0.3853.
- CVE-2018-5839Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-6265The Scripting and AutoUpdate functionality in Cordaware bestinformed Microsoft Windows client versions before 6.2.1.0 are affected by…
- CVE-2019-6266Cordaware bestinformed Microsoft Windows client before 6.2.1.0 is affected by insecure SSL certificate verification and insecure access…
- CVE-2019-9162In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient ASN.1 length…
- CVE-2018-20033A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow…Flexera Software FlexNet Publisher
- CVE-2019-9151An issue was discovered in the HDF HDF5 1.10.4 library.
- CVE-2019-9152An issue was discovered in the HDF HDF5 1.10.4 library.
- CVE-2019-9146Jamf Self Service 10.9.0 allows man-in-the-middle attackers to obtain a root shell by leveraging the "publish Bash shell scripts" feature…
Show all 54 entriesShow fewer entries
- CVE-2019-1683Cisco SPA112, SPA525, and SPA5x5 Series IP Phones Certificate Validation VulnerabilityCisco Small Business SPA500 Series IP Phones · Cisco Sma… +2
- CVE-2019-9145An issue was discovered in Hsycms V1.1.
- CVE-2019-9142An issue was discovered in b3log Symphony (aka Sym) before v3.4.7.org.b3log:symphony
- CVE-2019-9143An issue was discovered in Exiv2 0.27.
- CVE-2019-9144An issue was discovered in Exiv2 0.27.
- CVE-2019-9116DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse…
- CVE-2018-20789tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary directory as a consequence of a paths[0] path…
- CVE-2018-20790tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary file as a consequence of a paths[0] path traversal…
- CVE-2018-20791tecrail Responsive FileManager 9.13.4 allows XSS via a media file upload with an XSS payload in the name, because of mishandling of the…
- CVE-2018-20792tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary file via path traversal with the path parameter, through…
- CVE-2018-20793tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary file as a consequence of a paths[0] path traversal…
- CVE-2018-20794tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary image file (jpg/jpeg/png) via path traversal with…
- CVE-2018-20795tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary files via path traversal with the path parameter, through…
- CVE-2019-9122An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices.
- CVE-2019-9123An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices.
- CVE-2019-9124An issue was discovered on D-Link DIR-878 1.12B01 devices.
- CVE-2019-9125An issue was discovered on D-Link DIR-878 1.12B01 devices.
- CVE-2019-9126An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices.
- CVE-2018-20787The ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow…
- CVE-2018-20788drivers/leds/leds-aw2023.c in the led driver for custom Linux kernels on the Xiaomi Redmi 6pro daisy-o-oss phone has several integer…
- CVE-2019-9111The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS…
- CVE-2019-9112The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS…
- CVE-2019-9113Ming (aka libming) 0.4.8 has a NULL pointer dereference in the function getString() in the decompile.c file in libutil.a.
- CVE-2019-9114Ming (aka libming) 0.4.8 has an out of bounds write vulnerability in the function strcpyext() in the decompile.c file in libutil.a.
- CVE-2019-9115In irisnet-crypto before 1.1.7 for IRISnet, the util/utils.js file allows code execution because of unsafe eval usage.irisnet-crypto
- CVE-2019-9107XSS exists in WUZHI CMS 4.1.0 via index.php?m=attachment&f=imagecut&v=init&imgurl=[XSS] to coreframe/app/attachment/imagecut.php.
- CVE-2019-9108XSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=baidumap&x=[XSS]&y=[XSS] to coreframe/app/core/map.php.
- CVE-2019-9109XSS exists in WUZHI CMS 4.1.0 via index.php?m=message&f=message&v=add&username=[XSS] to coreframe/app/message/message.php.
- CVE-2019-9110XSS exists in WUZHI CMS 4.1.0 via index.php?m=content&f=postinfo&v=listing&set_iframe=[XSS] to coreframe/app/content/postinfo.php.