Archive
7 January 2022
Vulnerabilities first published on this day (UTC), newest first.
102 results · Feed
-
Unscored —
Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to…
-
Medium 4.3
Log entry injection in Spring Framework
In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries. This is a follow-up to CVE-2021-22096 that protects against add…
-
Low 2.6
ICSMA-22-006-01 Philips Engage Software
The affected product is vulnerable to an improper access control, which may allow an authenticated user to gain unauthorized access to sensitive data.
-
Unscored —
A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control <2021.2 (10.7.30.0) that c…
-
Medium 4.3CVE-2021-35247 Exploited
Improper Input Validation Vulnerability in Serv-U
Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. Please Note: No downstream affect has been detected as t…
KEV Jan 21, 2022 -
Unscored —
There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this…
-
Unscored —
There is an Integer overflow vulnerability with ACPU in smartphones. Successful exploitation of this vulnerability may …
-
Unscored —
There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExService a in smartphones…
-
Unscored —
The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may af…
-
Unscored —
The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect…
-
Unscored —
The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability…
-
Unscored —
The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may …
-
Unscored —
The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation …
-
Unscored —
The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect…
-
Unscored —
The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect dat…
-
Unscored —
The bone voice ID trusted application (TA) has a heap overflow vulnerability. Successful exploitation of this vulnerabi…
-
Unscored —
The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in mali…
-
Unscored —
There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this …
-
Unscored —
There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability ma…
-
Unscored —
There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in s…
-
Unscored —
There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in…
-
Unscored —
There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this …
-
Unscored —
There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in…
-
Unscored —
There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this v…
-
Unscored —
There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnera…
-
Unscored —
There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitati…
-
Unscored —
There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vuln…
-
Unscored —
Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may …
-
Unscored —
The distributed data service component has a vulnerability in data access control. Successful exploitation of this vuln…
-
Unscored —
The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may aff…
-
Unscored —
HwPCAssistant has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confide…
-
Unscored —
The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result…
-
Unscored —
The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result…
-
Unscored —
The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the MeeT…
-
Unscored —
There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings. Due to in…
-
Medium 5.3
Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive info…
-
Low 3.9
Abitrary file access vulnerability in Samsung Email prior to 6.1.60.16 allows attacker to read isolated data in sandbox.
-
High 7.5
Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist.
-
Medium 4.4
A vulnerability using PendingIntent in Bixby Routines prior to version 3.1.21.8 in Android R(11.0) and 2.6.30.5 in Andr…
-
Medium 4.4
A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Andro…