Archive
16 March 2022
Vulnerabilities first published on this day (UTC), newest first.
151 results · Feed
-
Unscored —
In ih264d_parse_decode_slice of ih264d_parse_slice.c, there is a possible out of bounds write due to a heap buffer over…
-
Unscored —
In NotificationStackScrollLayout of NotificationStackScrollLayout.java, there is a possible way to bypass Factory Reset…
-
Unscored —
In PackageManager, there is a possible permanent denial of service due to resource exhaustion. This could lead to local…
-
High 7.8CVE-2021-39793 Exploited
In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the…
KEV Apr 11, 2022 -
Unscored —
In usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read due to a race condition…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A
-
Unscored —
In prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c, there is a possible out of bounds writ…
-
Unscored —
In gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due to a race condition. …
-
Unscored —
In sendMessage of OneToOneChatImpl.java (? TBD), there is a possible way to send an RCS message without permissions due…
-
Unscored —
In amcs_cdev_unlocked_ioctl of audiometrics.c, there is a possible out of bounds write due to improper input validation…
-
Unscored —
In copy_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead…
-
Unscored —
In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to a…
-
Unscored —
In TBD of TBD, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…
-
Unscored —
In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local esc…
-
Unscored —
In eicPresentationRetrieveEntryValue of acropora/app/identity/libeic/EicPresentation.c, there is a possible information…
-
Unscored —
In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead …
-
Unscored —
In gasket_free_coherent_memory_all of gasket_page_table.c, there is a possible memory corruption due to a double free. …
-
Unscored —
In TuningProviderBase::GetTuningTreeSet of tuning_provider_base.cc, there is a possible out of bounds read due to a mis…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-209014813References: N/A
-
Unscored —
In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds read due to an…
-
Unscored —
In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-207433926References: N/A
-
Unscored —
In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an integer overflow. This …
-
Unscored —
In iaxxx_btp_write_words of iaxxx-btp.c, there is a possible out of bounds read due to an incorrect bounds check. This …
-
Unscored —
In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to a…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-206977562References: N/A
-
Unscored —
In __show_regs of process.c, there is a possible leak of kernel memory and addresses due to log information disclosure.…
-
Unscored —
In ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to loca…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel
-
Unscored —
In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could …
-
Unscored —
In TBD of TBD, there is a possible user after free vulnerability due to a race condition. This could lead to local esca…
-
Unscored —
Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A
-
High 8.8
Code Injection in CRI-O
A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster no…
-
Medium 6.5
pgAdmin 4 Path Traversal vulnerability
A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and session cookie to manually upload files to any location that the operating system user account under which pgAdmin is running has permission t…
-
Unscored —
A Cross-Site Scripting (XSS) attack can cause arbitrary code (javascript) to run in a user’s browser while the browser …
-
Critical 9.8
PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain XML messages to a specific port without proper authentication. Successful exploitation of this vulnerability…
-
High 7.5
PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) when receiving certain input throws an exception. Services using said function do not handle the exception. Successful exploitation of this vulner…
-
High 7.5
PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send a certain command to a specific port without authentication. Successful exploitation of this vulnerability could all…
-
High 7.5
PTC Axeda agent and Axeda Desktop Server Path Traversal
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) (disregarding Axeda agent v6.9.2 and v6.9.3) is vulnerable to directory traversal, which could allow a remote unauthenticated attacker to obtain f…
-
Medium 5.3
PTC Axeda agent and Axeda Desktop Server Information Exposure
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) supplies the event log of the specific service.