CVEs published February 25, 2019
55 CVEs were published on February 25, 2019: 0 critical, 1 high.
- Published
- 55
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 53
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 12
- Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- 4
- Cisco Small Business SPA500 Series IP Phones · Cisco Sma… +2
- 1
- Cisco Webex Teams
- 1
- Flexera Software FlexNet Publisher
- 1
- irisnet-crypto
- 1
- org.b3log:symphony
- 1
- Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- 1
High 1
Medium, low and unrated 54
- CVE-2018-11289Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a buffer overflow in SnaQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11820Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto, SQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11845Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdragon Auto, SnapdragonQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11864Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectiQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11931Improper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SnapdrQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11932Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11935Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto, SnapdragoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11938Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, SnapdragoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11945Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in SnapdrQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11948Exceeding the limit of usage entries are not tracked and the information will be lost causing the content to lose continuity in Snapdragon AQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13900Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon Auto, Snapdragon CoQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-13904Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Snapdragon Compute, SnaQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13905KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon ConsumerQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-13912Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connectivity, Snapdragon ConQualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- CVE-2018-13913Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT, SnaQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-13914Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer IQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-20063An issue was discovered in Gurock TestRail 5.6.0.3853.
- CVE-2018-5839Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, SnaQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-6265The Scripting and AutoUpdate functionality in Cordaware bestinformed Microsoft Windows client versions before 6.2.1.0 are affected by insecu
- CVE-2019-6266Cordaware bestinformed Microsoft Windows client before 6.2.1.0 is affected by insecure SSL certificate verification and insecure access patt
- CVE-2019-9162In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient ASN.1 length checks
- CVE-2018-20033A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow aFlexera Software FlexNet Publisher
- CVE-2019-9151An issue was discovered in the HDF HDF5 1.10.4 library.
- CVE-2019-9152An issue was discovered in the HDF HDF5 1.10.4 library.
- CVE-2019-9146Jamf Self Service 10.9.0 allows man-in-the-middle attackers to obtain a root shell by leveraging the "publish Bash shell scripts" feature to
- CVE-2019-1683Cisco SPA112, SPA525, and SPA5x5 Series IP Phones Certificate Validation VulnerabilityCisco Small Business SPA500 Series IP Phones · Cisco Sma… +2
- CVE-2019-9145An issue was discovered in Hsycms V1.1.
- CVE-2019-9142An issue was discovered in b3log Symphony (aka Sym) before v3.4.7.org.b3log:symphony
- CVE-2019-9143An issue was discovered in Exiv2 0.27.
- CVE-2019-9144An issue was discovered in Exiv2 0.27.
- CVE-2019-9116DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse api-ms-win-core-fibe
- CVE-2018-20789tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary directory as a consequence of a paths[0] path traversal
- CVE-2018-20790tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary file as a consequence of a paths[0] path traversal miti
- CVE-2018-20791tecrail Responsive FileManager 9.13.4 allows XSS via a media file upload with an XSS payload in the name, because of mishandling of the medi
- CVE-2018-20792tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary file via path traversal with the path parameter, through the
- CVE-2018-20793tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary file as a consequence of a paths[0] path traversal mi
- CVE-2018-20794tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary image file (jpg/jpeg/png) via path traversal with the
- CVE-2018-20795tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary files via path traversal with the path parameter, through th
- CVE-2019-9122An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices.
- CVE-2019-9123An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices.
- CVE-2019-9124An issue was discovered on D-Link DIR-878 1.12B01 devices.
- CVE-2019-9125An issue was discovered on D-Link DIR-878 1.12B01 devices.
- CVE-2019-9126An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices.
- CVE-2018-20787The ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow a
- CVE-2018-20788drivers/leds/leds-aw2023.c in the led driver for custom Linux kernels on the Xiaomi Redmi 6pro daisy-o-oss phone has several integer overflo
- CVE-2019-9111The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS bec
- CVE-2019-9112The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS bec
- CVE-2019-9113Ming (aka libming) 0.4.8 has a NULL pointer dereference in the function getString() in the decompile.c file in libutil.a.
- CVE-2019-9114Ming (aka libming) 0.4.8 has an out of bounds write vulnerability in the function strcpyext() in the decompile.c file in libutil.a.
- CVE-2019-9115In irisnet-crypto before 1.1.7 for IRISnet, the util/utils.js file allows code execution because of unsafe eval usage.irisnet-crypto
- CVE-2019-9107XSS exists in WUZHI CMS 4.1.0 via index.php?m=attachment&f=imagecut&v=init&imgurl=[XSS] to coreframe/app/attachment/imagecut.php.
- CVE-2019-9108XSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=baidumap&x=[XSS]&y=[XSS] to coreframe/app/core/map.php.
- CVE-2019-9109XSS exists in WUZHI CMS 4.1.0 via index.php?m=message&f=message&v=add&username=[XSS] to coreframe/app/message/message.php.
- CVE-2019-9110XSS exists in WUZHI CMS 4.1.0 via index.php?m=content&f=postinfo&v=listing&set_iframe=[XSS] to coreframe/app/content/postinfo.php.