Archive
11 February 2022
Vulnerabilities first published on this day (UTC), newest first.
166 results · Feed
-
Medium 5.9
Improper Validation of Certificate with Host Mismatch in mellium.im/xmpp/websocket
In Mellium mellium.im/xmpp through 0.21.0, an attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under their control without causing TLS certificate verification to fail. This occurs because the wrong host nam…
-
High 7.0
BD Pyxis Products - Hardcoded Credentials
Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application creden…
-
Unscored —
A vulnerability was discovered in Tenda AC9 v3.0 V15.03.06.42_multi and Tenda AC9 V1.0 V15.03.05.19(6318)_CN which allo…
-
Unscored —
Tokheim Profleet DiaLOG 11.005.02 is affected by SQL Injection. The component is the Field__UserLogin parameter on the …
-
Unscored —
In TBD of TBD, there is a possible out of bounds read due to TBD. This could lead to local information disclosure with …
-
Unscored —
In HandleTransactionIoEvent of actuator_driver.cc, there is a possible out of bounds read due to a heap buffer overflow…
-
Unscored —
In startVideoStream() there is a possibility of an OOB Read in the heap, when the camera buffer is ‘zero’ in size.Produ…
-
Unscored —
In isServiceDistractionOptimized of CarPackageManagerService.java, there is a possible disclosure of installed packages…
-
High 8.4
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functi…
KEV Aug 21, 2024 -
Unscored —
In fastboot, there is a possible secure boot bypass due to a configuration error. This could lead to local escalation o…
-
Unscored —
In writeThrowable of AndroidFuture.java, there is a possible parcel serialization/deserialization mismatch due to impro…
-
Unscored —
In GKI_getbuf of gki_buffer.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead …
-
Unscored —
In btm_sec_connected and btm_sec_disconnected of btm_sec.cc file , there is a possible use after free. This could lead …
-
Unscored —
In code generated by aidl_const_expressions.cpp, there is a possible out of bounds read due to uninitialized data. This…
-
Unscored —
In onCreate of InstallCaCertificateWarning.java, there is a possible way to mislead an user about CA installation circu…
-
Unscored —
In onActivityViewReady of DetailDialog.kt, there is a possible Intent Redirect due to a confused deputy. This could lea…
-
Unscored —
In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could l…
-
Unscored —
In checkSpsUpdated of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This cou…
-
Unscored —
In openFileAndEnforcePathPermissionsHelper of MediaProvider.java, there is a possible bypass of a permissions check due…
-
Unscored —
In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This co…
-
Unscored —
In checkUriPermission of MediaProvider.java , there is a possible way to gain access to the content of media provider c…
-
Unscored —
ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service，but it does…
-
Unscored —
ims_ex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permission…
-
Unscored —
In clear_data_dlg_text of strings.xml, there is a possible situation when "Clear storage" functionality sets up the wro…
-
Unscored —
In updatePackageMappingsData of UsageStatsService.java, there is a possible way to bypass security and privacy settings…
-
Unscored —
-
Unscored —
Local privilege escalation due to insecure folder permissions
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor (Windows) before build 53
-
Unscored —CVE-2021-22824 EPSS 14%
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due …
-
Unscored —CVE-2021-22823 EPSS 21%
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary fil…
-
Unscored —
A CWE-20: Improper Input Validation vulnerability exists that could cause a Denial of Service when a crafted packet is …
-
Unscored —
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary fil…
-
Unscored —
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause disclosure …
-
Unscored —CVE-2021-22802 EPSS 20%
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution d…
-
Unscored —
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code executio…
-
Unscored —
A CWE-269: Improper Privilege Management vulnerability exists that could cause an arbitrary command execution when the …
-
Unscored —
A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data exfiltration and unau…
-
Unscored —
A CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause Sensitive data such as login cred…
-
High 7.5
A CWE-787: Out-of-bounds Write vulnerability exists that could cause denial of service when an attacker sends a special…
-
High 7.5
A CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of the device when an attac…
-
High 7.5
A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files located in the web…