Archive
9 June 2021
Vulnerabilities first published on this day (UTC), newest first.
184 results · Feed
-
Medium 5.3
Due to improper input sanitization, specially crafted LDAP queries can be injected by an unauthenticated user. This cou…
-
Medium 6.1CVE-2021-33829 Scanner template
ckeditor4 vulnerable to cross-site scripting
A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because --!> is mishandled.
-
Critical 10.0
Circutor SGE-PLC1000 OS command Injection
SGE-PLC1000 device, in its 0.9.2b firmware version, does not handle some requests correctly, allowing a remote attacker to inject code into the operating system with maximum privileges.
-
High 8.8
Circutor SGE-PLC1000 improper authentication
Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network wh…
-
Unscored —CVE-2021-34369 Public exploit
portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensit…
-
Unscored —
Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are…
-
Unscored —
AMD Speculative execution with Floating-Point Value Injection
Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data …
-
Unscored —
AMD Speculative Code Store Bypass
Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwritten instructions, may cause an incorrect speculation and could result in data leakage.
-
Unscored —
The Refined GitHub browser extension before 21.6.8 might allow XSS via a link in a document. NOTE: github.com sends Con…
-
High 7.5
Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packe…
-
High 8.4
Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdra…
-
High 7.8
Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdra…
-
High 7.8
Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdrag…
-
High 7.8
While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared mem…
-
High 7.8
Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon …
-
Critical 9.8
Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due…
-
High 8.4
Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value…
-
Critical 9.8
While processing server certificate from IPSec server, certificate validation for subject alternative name API can caus…
-
Unscored —
Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdra…
-
Unscored —
Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infras…
-
Unscored —
A race between command submission and destroying the context can cause an invalid context being added to the list leads…
-
High 7.8CVE-2020-11261 Exploited
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size…
KEV Dec 1, 2021 -
Unscored —
An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, S…
-
Unscored —
Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastruc…
-
Unscored —
Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastruc…
-
Unscored —
Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastruc…
-
Unscored —
Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infra…
-
Unscored —
Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute…
-
Unscored —
Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attr…
-
Unscored —
Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleane…
-
Unscored —
Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is allo…
-
Unscored —
Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdrag…
-
Unscored —
Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again …
-
Unscored —
Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Aut…
-
Unscored —
Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon…
-
Unscored —
Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping wit…
-
Unscored —
Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the …
-
Unscored —
Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external compo…
-
Unscored —
Resource leakage issue during dci client registration due to reference count is not decremented if dci client registrat…
-
Unscored —
Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length …