Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2018-02-26 CVE-2018-7484 Untrusted Search Path vulnerability in Purevpn 5.19.4.0
An issue was discovered in PureVPN through 5.19.4.0 on Windows.
local
low complexity
purevpn CWE-426
7.8
2018-02-26 CVE-2017-15696 Information Exposure vulnerability in Apache Geode
When an Apache Geode cluster before v1.4.0 is operating in secure mode, the Geode configuration service does not properly authorize configuration requests.
network
low complexity
apache CWE-200
7.5
2018-02-25 CVE-2018-7480 Double Free vulnerability in multiple products
The blkcg_init_queue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local users to cause a denial of service (double free) or possibly have unspecified other impact by triggering a creation failure.
local
low complexity
linux canonical debian CWE-415
7.8
2018-02-25 CVE-2018-7471 Integer Overflow or Wraparound vulnerability in Bj-Tct Kingview 7.5
KingView 7.5SP1 has an integer overflow during stgopenstorage API read operations.
local
low complexity
bj-tct CWE-190
7.8
2018-02-25 CVE-2018-7466 Code Injection vulnerability in Testlink
install/installNewDB.php in TestLink through 1.9.16 allows remote attackers to conduct injection attacks by leveraging control over DB LOGIN NAMES data during installation to provide a long, crafted value.
network
high complexity
testlink CWE-94
7.5
2018-02-24 CVE-2017-18198 Out-of-bounds Read vulnerability in GNU Libcdio
print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted iso file.
network
low complexity
gnu CWE-125
8.8
2018-02-23 CVE-2017-17767 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, the IL client may free a buffer OMX Video Encoder Component and then subsequently access the already freed buffer.
local
low complexity
google CWE-119
7.8
2018-02-23 CVE-2017-17765 Integer Overflow or Wraparound vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, multiple values received from firmware are not properly validated in wma_get_ll_stats_ext_buf() and are used to allocate the sizes of buffers and may be vulnerable to integer overflow leading to buffer overflow.
local
low complexity
google CWE-190
7.8
2018-02-23 CVE-2017-17764 Integer Overflow or Wraparound vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, the num_failure_info value from firmware is not properly validated in wma_rx_aggr_failure_event_handler() so that an integer overflow vulnerability in a buffer size calculation may potentially lead to a buffer overflow.
local
low complexity
google CWE-190
7.8
2018-02-23 CVE-2017-15862 Integer Overflow or Wraparound vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, in wma_unified_link_radio_stats_event_handler(), the number of radio channels coming from firmware is not properly validated, potentially leading to an integer overflow vulnerability followed by a buffer overflow.
local
low complexity
google CWE-190
7.8