Archive
6 October 2021
Vulnerabilities first published on this day (UTC), newest first.
129 results · Feed
-
Medium 5.9
SQL injection vulnerabilities in CMFA framework prior to SMR Oct-2021 Release 1 allow untrusted application to overwrit…
-
Medium 6.4
An improper error handling in Exynos CP booting driver prior to SMR Oct-2021 Release 1 allows local attackers to bypass…
-
Medium 4.4
A lack of replay attack protection in GUTI REALLOCATION COMMAND message process in Qualcomm modem prior to SMR Oct-2021…
-
High 7.2
A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitra…
-
High 7.2
A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitr…
-
Medium 4.4
An improper error handling in Mediatek RRC Protocol stack prior to SMR Oct-2021 Release 1 allows modem crash and remote…
-
Medium 4.1
An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows attackers to bypass t…
-
Low 3.9
A possible heap-based buffer overflow vulnerability in DSP kernel driver prior to SMR Oct-2021 Release 1 allows arbitra…
-
Medium 4.4
Assuming a shell privilege is gained, an improper exception handling for multi_sim_bar_show_on_qspanel value in SystemU…
-
Medium 4.4
Assuming a shell privilege is gained, an improper exception handling for multi_sim_bar_hide_by_meadia_full value in Sys…
-
Medium 4.0
An improper access control vulnerability in BluetoothSettingsProvider prior to SMR Oct-2021 Release 1 allows untrusted …
-
Low 3.7
A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial …
-
High 7.9
An improper caller check logic of SMC call in TEEGRIS secure OS prior to SMR Oct-2021 Release 1 can be used to compromi…
-
Medium 6.0
A possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows arbitr…
-
Medium 4.4
A possible guessing and confirming a byte memory vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 all…
-
Medium 5.3
Assuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP kernel driver prior to …
-
High 7.7
WP Bannerize 2.0.0 - 4.0.2 - Authenticated SQL Injection
The WP Bannerize WordPress plugin is vulnerable to authenticated SQL injection via the id parameter found in the ~/Classes/wpBannerizeAdmin.php file which allows attackers to exfiltrate sensitive information from vulnerable sites. This issue affects versions …
-
Medium 6.1CVE-2021-39350 Scanner template
FV Flowplayer Video Player <= 7.5.0.727 - 7.5.2.727 Reflected Cross-Site Scripting
The FV Flowplayer Video Player WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the player_id parameter found in the ~/view/stats.php file which allows attackers to inject arbitrary web scripts, in versions 7.5.0.727 - 7.5.2.727.
-
Unscored —
An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw…
-
Unscored —
In system properties, there is a possible information disclosure due to a missing permission check. This could lead to …
-
Unscored —
In system properties, there is a possible information disclosure due to a missing permission check. This could lead to …
-
Unscored —
In ParsedIntentInfo of ParsedIntentInfo.java, there is a possible parcel serialization/deserialization mismatch due to …
-
Unscored —
In RGB_to_BGR1_portable of SkSwizzler_opts.h, there is a possible out of bounds read due to a missing bounds check. Thi…
-
Unscored —
When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video …
-
Unscored —
When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video …
-
Unscored —
In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial …
-
Unscored —
In the SELinux policy configured in system_app.te, there is a possible way for system_app to gain code execution in oth…
-
Unscored —CVE-2021-0683 Public exploit
In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused …
-
Unscored —
In openFile of HeapDumpProvider.java, there is a possible way to retrieve generated heap dumps from debuggable apps due…
-
Unscored —
In get_sock_stat of xt_qtaguid.c, there is a possible out of bounds read due to a use after free. This could lead to lo…
-
Unscored —
In ih264d_mark_err_slice_skip of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer ov…
-
Unscored —
In conditionallyRemoveIdentifiers of SubscriptionController.java, there is a possible way to retrieve a trackable ident…
-
Unscored —
In onCreate of ConfirmConnectActivity.java, there is a possible pairing of untrusted Bluetooth devices due to a tapjack…
-
Unscored —
In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. Thi…
-
Unscored —
In sendBroadcastToInstaller of FirstScreenBroadcast.java, there is a possible activity launch due to an unsafe PendingI…
-
Unscored —
In getDefaultSmsPackage of RoleManagerService.java, there is a possible way to get information about the default sms ap…
-
Unscored —CVE-2021-0595 Public exploit
In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the prof…
-
Unscored —CVE-2021-0688 Public exploit
In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead …
-
Unscored —
In sendAccessibilityEvent of NotificationManagerService.java, there is a possible disclosure of notification data due t…
-
Unscored —
PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regio…