Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

4.7

MEDIUM

CVE-2017-18302

In Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016, a crafted HLOS client can modify...

Affected Products : sdm660_firmware msm8996au_firmware sd625_firmware sd835_firmware sda660_firmware sd820_firmware sdm630_firmware sd450_firmware sd425_firmware sd427_firmware +28 more products
Published: Sep. 20, 2018

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2017-18301

In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20...

Affected Products : sdm660_firmware sd845_firmware mdm9650_firmware msm8909w_firmware sd625_firmware sd835_firmware sdx20_firmware mdm9607_firmware mdm9640_firmware sd820_firmware +36 more products
Published: Sep. 20, 2018

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2017-18300

Secure display content could be accessed by third party trusted application after creating a fault in other trusted applications in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SDA660....

Affected Products : android sd_835_firmware mdm9650_firmware mdm9206_firmware mdm9607_firmware sda660_firmware sd_210_firmware sd_212_firmware sd_205_firmware mdm9206 +7 more products
Published: Oct. 23, 2018

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2017-18299

Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 62...

Affected Products : msm8996au_firmware sd_450_firmware sd_625_firmware sd_820_firmware sd_820a_firmware sd_835_firmware mdm9650_firmware mdm9206_firmware mdm9607_firmware sda660_firmware +28 more products
Published: Oct. 23, 2018

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2017-18298

Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 41...

Affected Products : msm8996au_firmware sd_450_firmware sd_625_firmware sd_820_firmware sd_820a_firmware sd_835_firmware mdm9650_firmware mdm9206_firmware mdm9607_firmware sda660_firmware +42 more products
Published: Oct. 23, 2018

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2017-18297

Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820....

Affected Products : android sd_450_firmware sd_625_firmware sd_820_firmware sd_425_firmware sd_430_firmware sd_650_firmware sd_652_firmware sd_425 sd_430 +5 more products
Published: Oct. 23, 2018

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2017-18296

Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD ...

Affected Products : msm8996au_firmware sd_450_firmware sd_625_firmware sd_820_firmware sd_820a_firmware sd_835_firmware mdm9650_firmware msm8909w_firmware sdx20_firmware mdm9206_firmware +38 more products
Published: Oct. 23, 2018

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2017-18295

Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, ...

Affected Products : msm8996au_firmware sd_450_firmware sd_625_firmware sd_820_firmware sd_820a_firmware sd_835_firmware mdm9650_firmware msm8909w_firmware sdx20_firmware mdm9206_firmware +28 more products
Published: Oct. 23, 2018

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2017-18294

While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version FSM9055, MDM9206, MDM9607, ...

Affected Products : msm8996au_firmware sd_450_firmware sd_625_firmware sd_820_firmware sd_820a_firmware sd_835_firmware mdm9650_firmware msm8909w_firmware sdx20_firmware mdm9206_firmware +38 more products
Published: Oct. 23, 2018

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2017-18293

When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can be bypassed using the corresponding banked GPIO registers instead in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MD...

Affected Products : android sd_450_firmware sd_625_firmware sd_835_firmware mdm9650_firmware mdm9206_firmware mdm9607_firmware sda660_firmware sd_210_firmware sd_212_firmware +19 more products
Published: Oct. 23, 2018

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2017-18292

Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/1...

Affected Products : msm8996au_firmware sd_450_firmware sd_625_firmware sd_820_firmware sd_820a_firmware msm8909w_firmware sd_410_firmware sd_412_firmware sd_210_firmware sd_212_firmware +32 more products
Published: Oct. 23, 2018

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2017-18291

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter....

Affected Products : stats
Published: Jun. 12, 2018

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2017-18290

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sort_direction parameter....

Affected Products : stats
Published: Jun. 12, 2018

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2017-18289

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET type parameter....

Affected Products : stats
Published: Jun. 12, 2018

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2017-18288

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter....

Affected Products : stats
Published: Jun. 12, 2018

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2017-18287

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST user_search parameter....

Affected Products : stats
Published: Jun. 12, 2018

Modified: Nov. 21, 2024
5.4

MEDIUM

CVE-2017-18286

nZEDb v0.7.3.3 has XSS in the 404 error page....

Affected Products : nzedb
Published: Jun. 05, 2018

Modified: Nov. 21, 2024
7.1

HIGH

CVE-2017-18285

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf ch...

Affected Products : linux burp
Published: Jun. 04, 2018

Modified: Nov. 21, 2024
7.1

HIGH

CVE-2017-18284

The Gentoo app-backup/burp package before 2.1.32 sets the ownership of the PID file directory to the burp account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root scrip...

Affected Products : linux burp
Published: Jun. 04, 2018

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2017-18283

Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660....

Affected Products : android sd_625_firmware sd_835_firmware qca9379_firmware sda660_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_845_firmware sd_850_firmware +9 more products
Published: Oct. 23, 2018

Modified: Nov. 21, 2024

Showing 20 of 292811 Results

Browse by Apps

Latest CVE Feed

4.7

5.5

5.5

5.5

7.8

7.8

7.8

7.8

7.8

7.8

5.5

9.8

9.8

9.8

9.8

9.8

5.4

7.1

7.1

6.5

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable