Total
7102 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2017-13304 | 1 Google | 1 Android | 2018-05-08 | 5.0 MEDIUM | 5.3 MEDIUM |
A information disclosure vulnerability in the Upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-70576999. | |||||
CVE-2017-13303 | 1 Google | 1 Android | 2018-05-08 | 5.0 MEDIUM | 5.3 MEDIUM |
A information disclosure vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-71359108. References: B-V2018010501. | |||||
CVE-2017-13298 | 1 Google | 1 Android | 2018-05-08 | 5.0 MEDIUM | 5.3 MEDIUM |
A information disclosure vulnerability in the Android media framework (libhavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-72117051. | |||||
CVE-2017-13297 | 1 Google | 1 Android | 2018-05-08 | 5.0 MEDIUM | 5.3 MEDIUM |
A information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71766721. | |||||
CVE-2017-13296 | 1 Google | 1 Android | 2018-05-08 | 5.0 MEDIUM | 5.3 MEDIUM |
A information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897454. | |||||
CVE-2017-13294 | 1 Google | 1 Android | 2018-05-08 | 5.0 MEDIUM | 5.3 MEDIUM |
A information disclosure vulnerability in the Android framework (aosp email application). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71814449. | |||||
CVE-2017-13269 | 1 Google | 1 Android | 2018-05-08 | 3.3 LOW | 4.3 MEDIUM |
A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68818034. | |||||
CVE-2017-13268 | 1 Google | 1 Android | 2018-05-08 | 3.3 LOW | 4.3 MEDIUM |
A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67058064. | |||||
CVE-2016-10234 | 1 Google | 1 Android | 2018-05-04 | 4.3 MEDIUM | 5.5 MEDIUM |
An information disclosure vulnerability in the Qualcomm IPA driver. Product: Android. Versions: Android kernel. Android ID: A-34390017. References: QC-CR#1069060. | |||||
CVE-2016-10236 | 1 Google | 1 Android | 2018-05-04 | 4.3 MEDIUM | 3.3 LOW |
An information disclosure vulnerability in the Qualcomm USB driver. Product: Android. Versions: Android kernel. Android ID: A-33280689. References: QC-CR#1102418. | |||||
CVE-2016-8485 | 1 Google | 1 Android | 2018-05-04 | 5.0 MEDIUM | 7.5 HIGH |
An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823681. | |||||
CVE-2016-8486 | 1 Google | 1 Android | 2018-05-04 | 5.0 MEDIUM | 7.5 HIGH |
An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823691. | |||||
CVE-2017-6425 | 1 Google | 1 Android | 2018-05-04 | 4.3 MEDIUM | 3.3 LOW |
An information disclosure vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-32577085. References: QC-CR#1103689. | |||||
CVE-2017-6426 | 1 Google | 1 Android | 2018-05-04 | 4.3 MEDIUM | 3.3 LOW |
An information disclosure vulnerability in the Qualcomm SPMI driver. Product: Android. Versions: Android kernel. Android ID: A-33644474. References: QC-CR#1106842. | |||||
CVE-2017-13877 | 1 Apple | 1 Iphone Os | 2018-05-04 | 4.3 MEDIUM | 3.3 LOW |
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to determine whether arbitrary files exist via a crafted app. | |||||
CVE-2017-13839 | 1 Apple | 1 Mac Os X | 2018-05-04 | 2.1 LOW | 5.5 MEDIUM |
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Spotlight" component. It allows local users to see results for other users' files. | |||||
CVE-2018-4168 | 1 Apple | 1 Iphone Os | 2018-05-04 | 2.1 LOW | 4.6 MEDIUM |
An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Files Widget" component. It allows physically proximate attackers to obtain sensitive information by leveraging the display of cached data on a locked device. | |||||
CVE-2018-4137 | 1 Apple | 2 Iphone Os, Safari | 2018-05-04 | 5.0 MEDIUM | 7.5 HIGH |
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. The issue involves the "Safari Login AutoFill" component. It allows remote attackers to read autofilled data by leveraging lack of a user-confirmation requirement. | |||||
CVE-2018-4123 | 1 Apple | 1 Iphone Os | 2018-05-04 | 2.1 LOW | 2.4 LOW |
An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves alarm and timer handling in the "Clock" component. It allows physically proximate attackers to discover the iTunes e-mail address. | |||||
CVE-2017-7890 | 1 Php | 1 Php | 2018-05-04 | 4.3 MEDIUM | 6.5 MEDIUM |
The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.31 and 7.x before 7.1.7, does not zero colorMap arrays before use. A specially crafted GIF image could use the uninitialized tables to read ~700 bytes from the top of the stack, potentially disclosing sensitive information. |