Vulnerabilities > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2018-08-17 | CVE-2018-10873 | Improper Input Validation vulnerability in multiple products A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. | 8.8 |
2018-08-16 | CVE-2018-15122 | Improper Input Validation vulnerability in Telerik Justassembly and Justdecompile An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and JustDecompile through 2018.2.605.0 makes it possible to execute code by decompiling a compiled .NET object (such as DLL or EXE) with an embedded resource file by clicking on the resource. | 7.8 |
2018-08-16 | CVE-2018-13446 | Improper Authentication vulnerability in Linecorp Line 8.8.1 An issue was discovered in the LINE jp.naver.line application 8.8.1 for Android. | 7.0 |
2018-08-16 | CVE-2018-13435 | Improper Authentication vulnerability in Linecorp Line 8.8.0 An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS. | 7.0 |
2018-08-16 | CVE-2018-12256 | Unrestricted Upload of File with Dangerous Type vulnerability in Litecart admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 allows remote authenticated attackers to upload a malicious file (resulting in remote code execution) by using the text/xml or application/xml Content-Type in a public_html/admin/?app=vqmods&doc=vqmods request. | 8.8 |
2018-08-15 | CVE-2017-13108 | Use of Hard-coded Credentials vulnerability in Psafe Dfndr Security 5.0.9 DFNDR Security Antivirus, Anti-hacking & Cleaner, 5.0.9, 2017-11-01, Android application uses a hard-coded key for encryption. | 7.5 |
2018-08-15 | CVE-2017-13107 | Use of Hard-coded Credentials vulnerability in Liveme 3.7.20 Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption. | 7.5 |
2018-08-15 | CVE-2017-13106 | Use of Hard-coded Credentials vulnerability in Cmcm CM Launcher 3D 5.0.3 Cheetahmobile CM Launcher 3D - Theme, wallpaper, Secure, Efficient, 5.0.3, 2017-09-19, Android application uses a hard-coded key for encryption. | 7.5 |
2018-08-15 | CVE-2017-13104 | Use of Hard-coded Credentials vulnerability in Uber Ubereats 1.108.10001 Uber Technologies, Inc. | 7.5 |
2018-08-15 | CVE-2017-13102 | Use of Hard-coded Credentials vulnerability in Gameloft Asphalt Xtreme 1.6.0 Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption. | 7.5 |