Archive
22 February 2021
Vulnerabilities first published on this day (UTC), newest first.
66 results · Feed
-
Unscored —
Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper…
-
Unscored —
Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beac…
-
Unscored —
Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a st…
-
Unscored —
Possible out of bounds while accessing global control elements due to race condition in Snapdragon Auto, Snapdragon Com…
-
Unscored —
Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status …
-
Unscored —
Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Sna…
-
Unscored —
Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute,…
-
Unscored —
Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon…
-
Unscored —
Stack overflow may occur if GSM/WCDMA broadcast config size received from user is larger than variable length array in …
-
Unscored —
Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary complia…
-
Unscored —
Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to impro…
-
Unscored —
Out of bound write and read in TA while processing command from NS side due to improper length check on command and res…
-
Unscored —
Possible out of bound access in TA while processing a command from NS side due to improper length check of response buf…
-
Unscored —
User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and…
-
Unscored —
Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon C…
-
Unscored —
Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header e…
-
Unscored —
Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage o…
-
Unscored —
Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameter…
-
Medium 6.1
MantisBT XSS in manage_custom_field_update.php
An issue was discovered in MantisBT through 2.24.3. In the helper_ensure_confirmed call in manage_custom_field_update.php, the custom field name is not sanitized. This may be problematic depending on CSP settings.
-
Unscored —
An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. Because the local notification service…
-
Unscored —
An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. There is cross-site scripting (XSS) in…
-
High 7.4
Django Channels leakage of session identifiers using legacy AsgiHandler
Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not corre…
-
Unscored —
In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, b…
-
Unscored —
On Netshield NANO 25 10.2.18 devices, /usr/local/webmin/System/manual_ping.cgi allows OS command injection (after authe…
-
Critical 9.8CVE-2021-26120 EPSS 82%
PHP Code Injection by malicious function name in smarty
Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring.
-
High 7.5
Sandbox escape through template_object in smarty
Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode.