CWE:

	Tytuł	Data	Autor
Low	Facebook For Android Information Disclosure / Open Proxy	31.07.2014	Dr. Manuel Sadosky

---

Common Weakness Enumeration (CWE)

CVE

Szczegóły

Opis

2019-03-27

Medium

CVE-2018-12182

Vendor: Tianocore Software: Edk ii

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.

2019-02-20

Medium

CVE-2019-3924

Vendor: Mikrotik Software: Routeros

MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability. The software will execute user defined network requests to both WAN and LAN clients. A remote unauthenticated attacker can use this vulnerability to bypass the router's firewall or for general network scanning activities.

2018-12-06

Low

CVE-2018-16598

Vendor: Amazon Software: Amazon web s...

An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. In xProcessReceivedUDPPacket and prvParseDNSReply, any received DNS response is accepted, without confirming it matches a sent DNS request.

2018-08-01

Medium

CVE-2018-1999038

Vendor: Jenkins Software: Publish over...

A confused deputy vulnerability exists in Jenkins Publisher Over CIFS Plugin 0.10 and earlier in CifsPublisherPluginDescriptor.java that allows attackers to have Jenkins connect to an attacker specified CIFS server with attacker specified credentials.

 

---

Copyright 2024, cxsecurity.com