Archive
3 January 2022
Vulnerabilities first published on this day (UTC), newest first.
35 results · Clear filters · Feed
-
High 7.5
There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in…
-
High 7.5
There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may aff…
-
High 7.5
The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may …
-
High 7.5
The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful explo…
-
High 7.5
The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may ca…
-
High 7.5
The HwNearbyMain module has a Improper Validation of Array Index vulnerability.Successful exploitation of this vulnerab…
-
High 7.5
Huawei idap module has a Out-of-bounds Read vulnerability.Successful exploitation of this vulnerability may cause Denia…
-
High 7.5
The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may …
-
High 7.5
The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may ca…
-
High 8.6
Improper Authorization in openwhyd/openwhyd
openwhyd is vulnerable to Improper Authorization
-
High 7.2
Download Monitor < 4.4.5 - Admin+ SQL Injection
The Download Monitor WordPress plugin before 4.4.5 does not properly validate and escape the "orderby" GET parameter before using it in a SQL statement when viewing the logs, leading to an SQL Injection issue
-
High 8.0
SUN & MOON RISE CO., LTD. Shockwall - Improper Authentication
The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery (S…
-
High 8.0
ASUS RT-AX56U Router - Stack-based buffer overflow
ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service.
-
High 8.4
Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress i…
-
High 8.4
Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdra…
-
High 8.4
Possible assertion in QOS request due to improper validation when multiple add or update request are received simultane…
-
High 7.8
Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, …
-
High 7.5
Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapd…
-
High 7.8
Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon A…
-
High 7.1
Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consume…
-
High 8.4
Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapd…
-
High 7.8
Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snap…
-
High 7.1
Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto,…
-
High 8.4
Possible integer overflow in access control initialization interface due to lack and size and address validation in Sna…
-
High 7.5
Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdra…
-
High 7.3
Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in…
-
High 7.3
Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdr…
-
High 7.3
Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferenci…
-
High 7.3
Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdrago…
-
High 7.8
Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdrago…
-
High 7.8
Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, S…
-
High 8.4
Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory…
-
High 7.1
Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, …
-
High 7.3
An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute…
-
High 8.8
Userfrosting - Host-Header Injection Leads to Account Takeover
In Userfrosting, versions v0.3.1 to v4.6.2 are vulnerable to Host Header Injection. By luring a victim application user to click on a link, an unauthenticated attacker can use the “forgot password” functionality to reset the victim’s password and successfully…