Archive

7 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /7 May 2021 →

All Critical High Medium Low Exploited only Public exploit

58 results · Feed

High 7.5

CVE-2020-11243

RRC sends a connection establishment success to NAS even though connection setup validation returns failure and leads t…

Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear

Apr 7, 2021
High 8.4

CVE-2020-11242

User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capt…

Qualcomm Snapdragon Industrial IOT, Snapdragon Mobile

Apr 7, 2021
High 8.4

CVE-2020-11237

Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before acces…

Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear

Apr 7, 2021
High 8.4

CVE-2020-11236

Memory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of servi…

Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear

Apr 7, 2021
High 8.4

CVE-2020-11234

When sending a socket event message to a user application, invalid information will be passed if socket is freed by oth…

Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear

Apr 7, 2021
Medium 6.7

CVE-2020-11231

Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in t…

Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Apr 7, 2021
Critical 9.3

CVE-2020-11210

Possible memory corruption in RPM region due to improper XPU configuration in Snapdragon Connectivity, Snapdragon Indus…

Qualcomm Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Apr 7, 2021
High 8.2

CVE-2020-11191

Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdrago…

Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear

Apr 7, 2021
Unscored —

CVE-2021-20692

Directory traversal vulnerability in Archive collectively operation utility Ver.2.10.1.0 and earlier allows an attacker…

EikiSoft Archive collectively operation utility

Apr 7, 2021
Unscored —

CVE-2021-20690

Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an arbitrary script via uns…

WonderLink Yomi-Search

Apr 7, 2021
Unscored —

CVE-2021-20691

Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an arbitrary script via uns…

WonderLink Yomi-Search

Apr 7, 2021
Unscored —

CVE-2021-20689

Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an arbitrary script via uns…

WonderLink Yomi-Search

Apr 7, 2021
Unscored —

CVE-2021-20687

Cross-site request forgery (CSRF) vulnerability in Kagemai 0.8.8 allows remote attackers to hijack the authentication o…

daifukuya.com Kagemai

Apr 7, 2021
Unscored —

CVE-2021-20688

Cross-site scripting vulnerability in Click Ranker Ver.3.5 allows remote attackers to inject an arbitrary script via un…

GoPlace! Click Ranker

Apr 7, 2021
Unscored —

CVE-2021-20686

Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecifi…

daifukuya.com Kagemai

Apr 7, 2021
Unscored —

CVE-2021-20685

Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecifi…

daifukuya.com Kagemai

Apr 7, 2021
Unscored —

CVE-2021-20684

Cross-site scripting vulnerability in MagazinegerZ v.1.01 allows remote attackers to inject an arbitrary script via uns…

CGI Script Market MagazinegerZ

Apr 7, 2021
Unscored —

CVE-2021-30147 Public exploit

DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php.

dma Ubuntu

Apr 7, 2021