Archive
September 2022
Vulnerabilities first published in this month (UTC), newest first.
2,174 results · Feed
-
High 7.8
Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escalation Vul…
-
Medium 5.5
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3, contain a relative …
-
High 8.1
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotec…
-
High 8.1
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3 , contain an inserti…
-
High 8.3
Recovery codes abuse in SFTPGo
SFTPGo is configurable SFTP server with optional HTTP/S, FTP/S and WebDAV support. SFTPGo WebAdmin and WebClient support login using TOTP (Time-based One Time Passwords) as a secondary authentication factor. Because TOTPs are often configured on mobile device…
-
High 8.8
Account takeover via SSO plugins in NodeBB
NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. Due to an unnecessarily strict conditional in the code handling the first step of the SSO process, the pre-existing logic that added (and later checked) …
-
High 8.8
Slice Memory Allocation with Excessive Size Value in binary
Binary provides encoding/decoding in Borsh and other formats. The vulnerability is a memory allocation vulnerability that can be exploited to allocate slices in memory with (arbitrary) excessive size value, which can either exhaust available memory or crash t…
-
High 7.3
Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Sna…
-
High 8.4
Memory corruption in multimedia due to buffer overflow while processing count variable from client in Snapdragon Auto
-
High 7.3
Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdrago…
-
High 7.3
Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function…
-
High 7.3
Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snap…
-
High 8.4
Memory corruption in multimedia due to improper length check while copying the data in Snapdragon Auto
-
High 8.4
Memory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon Auto
-
High 8.4
Memory corruption in multimedia due to improper check on the messages received. in Snapdragon Auto
-
Medium 6.2
Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapd…
-
High 8.4
Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto
-
High 8.4
Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto
-
High 8.4
Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdrago…
-
High 8.4
Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snap…
-
Critical 9.8
Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length p…
-
High 8.4
Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon C…
-
High 7.8
Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, S…
-
High 7.7
Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snap…
-
High 7.5
Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Sna…
-
High 8.2
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Sna…
-
High 7.8
Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Sn…
-
High 8.4
Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdrago…
-
Medium 6.2
A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdrag…
-
High 8.4
Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to mem…
-
Medium 6.7
Use after free in the synx driver issue while performing other functions during multiple invocation of synx release cal…
-
High 8.4
Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon C…
-
Critical 9.3
Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto…
-
High 7.3
Possible authentication bypass due to improper order of signature verification and hashing in the signature verificatio…
-
Medium 6.8
Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges i…
-
Medium 6.8
Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read an…
-
High 7.3
Possible authentication bypass due to improper order of signature verification and hashing in the signature verificatio…
-
Unscored —
Discourse through 2.8.7 allows admins to send invitations to arbitrary email addresses at an unlimited rate.
-
Unscored —
wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by send…
-
Medium 4.7
Overly permissive umask for daemons
In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the `--daemon` flag which could result in a race condition giving world-writable files in the Airflow home directory and allowing local users …