Archive
January 2021
Vulnerabilities first published in this month (UTC), newest first.
1,527 results · Feed
-
Unscored —
A local (authenticated) low-privileged user can exploit a behavior in an ESET installer to achieve arbitrary file overw…
-
Medium 5.8
Use of a One-Way Hash without a Salt in OnlineVotingSystem
OnlineVotingSystem is an open source project hosted on GitHub. OnlineVotingSystem before version 1.1.2 hashes user passwords without a salt, which is vulnerable to dictionary attacks. Therefore there is a threat of security breach in the voting system. Withou…
-
Medium 6.5
SAML XML Signature wrapping
PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. All users of pysaml2 that need to validate signed SAML documents are impacted. The vulnerability is…
-
Medium 6.5CVE-2021-21239 Public exploit
Open default xmlsec1 key-type preference
PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. Users of pysaml2 that use the default CryptoBackendXmlSec1 backend and need to verify signed SAML d…
-
Low 2.6
IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, …
-
Medium 5.3
IBM Security Identity Governance and Intelligence 5.2.6 uses weaker than expected cryptographic algorithms that could a…
-
High 7.4
IBM Security Identity Governance and Intelligence 5.2.6 does not perform any authentication for functionality that requ…
-
Medium 4.3
IBM Security Identity Governance and Intelligence 5.2.6 does not set the secure attribute on authorization tokens or se…
-
High 8.7
CMS Editor code execution
OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, an administrator with permission to import/export data and to edit cms pages was able to inject an executable file on the server via layout xml. The late…
-
High 8.7
Widget instances allows a hacker to inject an executable file on the server on OpenMage
OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, there is a vulnerability which enables remote code execution. In affected versions an administrator with permission to import/export data and to create w…
-
Unscored —
Possible out of bound memory access in audio due to integer underflow while processing modified contents in Snapdragon …
-
Unscored —
Local privilege escalation in admin services in Windows environment can occur due to an arbitrary read issue.
-
Unscored —
Possible memory out of bound issue during music playback when an incorrect bit stream content is copied into array with…
-
Unscored —
Pointer variable which is freed is not cleared can result in memory corruption and leads to denial of service in Snapdr…
-
Unscored —
A possible double free or invalid memory access in audio driver while reading Speaker Protection parameters in Snapdrag…
-
Unscored —
Out of bound access in WLAN driver due to lack of validation of array length before copying into array in Snapdragon Au…
-
Unscored —
Buffer over read can happen in video driver when playing clip with atomsize having value UINT32_MAX in Snapdragon Auto,…
-
Unscored —
An out of bounds read can happen when processing VSA attribute due to improper minimum required length check in Snapdra…
-
Unscored —
Buffer over-read while processing NDL attribute if attribute length is larger than expected and then FW is treating it …
-
Unscored —
Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in…
-
Unscored —
Buffer over-read while parsing RPS due to lack of check of input validation on values received from user side. in Snapd…
-
Unscored —
Out of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field check in Snapdragon A…
-
Unscored —
Possible integer overflow can occur when stream info update is called when total number of streams detected are zero wh…
-
Unscored —
Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data recei…
-
Unscored —
A process can potentially cause a buffer overflow in the display service allowing privilege escalation by executing cod…
-
Unscored —
Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer recei…
-
Unscored —CVE-2020-11179 Public exploit
Arbitrary read and write to kernel addresses by temporarily overwriting ring buffer pointer and creating a race conditi…
-
Unscored —
Out of bound access in computer vision control due to improper validation of command length before processing it in Sna…
-
Unscored —
Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected i…
-
Unscored —
Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between…
-
Unscored —
Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in …
-
Unscored —
Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in Snapdragon Auto, Snapdragon…
-
Unscored —
Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset…
-
Unscored —
Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and me…
-
Unscored —
Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon …
-
Unscored —
Divide by zero issue can happen while updating delta extension header due to improper validation of master SN and exten…
-
Unscored —
Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses p…
-
Unscored —
Out of bound memory access during music playback with modified content due to copying data without checking destination…
-
Unscored —
Out of bound memory access during music playback with ALAC modified content due to improper validation in Snapdragon Au…
-
Unscored —
Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, …