Archive
May 2021
Vulnerabilities first published in this month (UTC), newest first.
1,521 results · Feed
-
Unscored —
The affected product is vulnerable to an integer overflow while processing HTTP headers, which may allow an attacker to…
-
Unscored —
The affected product is vulnerable to integer overflow while parsing malformed over-the-air firmware update files, whic…
-
Unscored —
A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing…
-
Unscored —
Proofpoint Enterprise Protection (PPS/PoD) before 8.16.4 contains a vulnerability that could allow an attacker to deliv…
-
Unscored —
VMware vRealize Business for Cloud 7.x prior to 7.6.0 contains a remote code execution vulnerability due to an unauthor…
-
Unscored —
LivingLogic XIST4C before 0.107.8 allows XSS via login.htm, login.wihtm, or login-form.htm.
-
Unscored —
LivingLogic XIST4C before 0.107.8 allows XSS via feedback.htm or feedback.wihtm.
-
Unscored —
Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by XML External Entity (XXE) injection. An authenti…
-
Unscored —
Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control where password revalida…
-
Unscored —
Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control that can lead to remote…
-
Unscored —
Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by an information disclosure vulnerability. Through…
-
Unscored —
Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by a token spoofing vulnerability. Each payment ter…
-
Medium 6.5
Jun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system - Local File Inclusion
Local File Inclusion vulnerability of the omni-directional communication system allows remote authenticated attacker inject absolute path into Url parameter and access arbitrary file.
-
Medium 4.6
Jun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system - Reflected XSS
Special characters of picture preview page in the Quan-Fang-Wei-Tong-Xun system are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out Reflected XSS (Cross-site scripting) attacks, additional…
-
Medium 4.6
Jun-He Technology Ltd. ERP POS - Stored XSS-2
Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate customer’s …
-
Medium 4.6
Jun-He Technology Ltd. ERP POS - Stored XSS-1
Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate…
-
High 8.4
Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Sna…
-
High 7.5
Possible denial of service scenario due to improper handling of group management action frame in Snapdragon Auto, Snapd…
-
High 7.8
Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdrag…
-
High 7.3
Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connec…
-
Medium 6.2CVE-2021-1906 Exploited
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Au…
KEV Nov 3, 2021 -
High 8.4CVE-2021-1905 Exploited
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon …
KEV Nov 3, 2021 -
Medium 6.8
Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon I…
-
Medium 6.8
Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snap…
-
High 8.4
A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Au…
-
Medium 5.9
Out of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto, …
-
Medium 5.1
Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer …
-
High 7.8
Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdrag…
-
High 7.8
Out of bound write can occur in playready while processing command due to lack of input validation in Snapdragon Auto, …
-
High 8.4
Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the m…
-
High 8.2
Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in …
-
High 7.5
Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdr…
-
High 7.5
Histogram type KPI was teardown with the assumption of the existence of histogram binning info and will lead to null po…
-
High 7.5
Denial of service in MODEM due to assert to the invalid configuration in Snapdragon Auto, Snapdragon Compute, Snapdrago…
-
High 7.5
Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of serv…
-
Medium 6.2
Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is vali…
-
Medium 4.3
Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0 allow attackers to identify …
-
Medium 5.4
Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javas…
-
High 7.5
Vault GitHub Action did not correctly mask multi-line secrets in output
HashiCorp vault-action (aka Vault GitHub Action) before 2.2.0 allows attackers to obtain sensitive information from log files because a multi-line secret was not correctly registered with GitHub Actions for log masking.
-
Critical 9.8
Command injection in LocalStack
The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter.