Archive
September 2022
Vulnerabilities first published in this month (UTC), newest first.
632 results · Clear filters · Feed
-
High 7.8
Use-after-free in io_uring in Linux Kernel
There exists a use-after-free in io_uring in the Linux kernel. Signalfd_poll() and binder_poll() use a waitqueue whose lifetime is the current task. It will send a POLLFREE notification to all waiters before the queue is freed. Unfortunately, the io_uring pol…
-
High 8.2
Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapd…
-
High 8.4
Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Sn…
-
High 8.4
Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mob…
-
High 7.5
Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Sn…
-
High 7.3
Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, …
-
High 7.3
Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compu…
-
High 7.5
Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, S…
-
High 7.5
Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapd…
-
High 8.4
Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when…
-
High 8.4
Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles wit…
-
High 7.8
memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Con…
-
High 7.8
Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach…
-
High 7.8
Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Indu…
-
High 7.5
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snap…
-
High 8.4
Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity…
-
High 8.4
Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobil…
-
High 8.4
Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon C…
-
High 8.4
Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, S…
-
High 7.5
HCL Traveler is susceptible to a Reflected Cross-Site Scripting vulnerability in the web admin (LotusTraveler.nsf)
There is a reflected Cross-Site Scripting vulnerability in the HCL Traveler web admin (LotusTraveler.nsf).
-
High 7.5
Out-of-bounds Read in go-cvss
go-cvss is a Go module to manipulate Common Vulnerability Scoring System (CVSS). In affected versions when a full CVSS v2.0 vector string is parsed using `ParseVector`, an Out-of-Bounds Read is possible due to a lack of tests. The Go module will then panic. T…
-
High 8.3
The readDir Endpoint Scope can be Bypassed With Symbolic Links in Tauri
Tauri is a framework for building binaries for all major desktop platforms. Due to missing canonicalization when `readDir` is called recursively, it was possible to display directory listings outside of the defined `fs` scope. This required a crafted symbolic…
-
High 8.1
Uninitialized memory read in LZ4 decompression leads to authentication bypass in Scylla
Scylla is a real-time big data database that is API-compatible with Apache Cassandra and Amazon DynamoDB. When decompressing CQL frame received from user, Scylla assumes that user-provided uncompressed length is correct. If user provides fake length, that is …
-
High 7.5
steal vulnerable to Regular Expression Denial of Service via input variable
A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the input variable in main.js.
-
High 8.7
Path Traversal vulnerability in Kubevirt
A path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1) on all platforms allows a user able to configure the kubevirt to read arbitrary files on the host filesystem which are publicly readable or which are readable for UID 107 or GID 107. …
-
High 7.5
steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments
A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the source and sourceWithComments variable in main.js.
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Vi…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Vi…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Vi…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Vi…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Vi…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Vi…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Vi…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Vi…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Vi…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022…