Skip to content
OpenAdvisories

Archive

6 January 2023

Vulnerabilities first published on this day (UTC), newest first.

34 results · Clear filters · Feed

  • High 7.8

    Bentley Systems MicroStation Connect versions 10.17.0.209 and prior are vulnerable to an Out-of-Bounds Read when when p…

  • High 7.8

    Bentley Systems MicroStation Connect versions 10.17.0.209 and prior are vulnerable to a Stack-Based Buffer Overflow whe…

  • High 8.4

    The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker t…

  • High 8.4

    The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for fi…

  • High 8.4

    A vulnerability exists in Nokia’s ASIK AirScale system module (versions 474021A.101 and 474021A.102) that could allow a…

  • High 8.4

    Stack based buffer overflow in Core

    Memory corruption due to stack-based buffer overflow in Core

  • High 8.4

    Stack based buffer overflow in Core

    Memory corruption in core due to stack-based buffer overflow

  • High 8.4

    Stack-based buffer overflow in Core

    Memory corruption in Core due to stack-based buffer overflow.

  • High 8.4

    Improper input validation in Automotive Android OS

    Memory corruption in Automotive Android OS due to improper input validation.

  • High 7.5

    Null pointer dereference in Bluetooth HOST

    Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.

  • High 7.5

    Null pointer dereference in Bluetooth HOST

    Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.

  • High 7.5

    Buffer over-read in WLAN

    Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.

  • High 7.5

    Buffer over-read in WLAN

    Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.

  • High 8.2

    Buffer over-read in WLAN

    Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.

  • High 8.2

    Buffer over-read in WLAN

    Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.

  • High 8.4

    Buffer copy without checking size of input in Modem

    Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.

  • High 8.4

    Improper validation of array index in Android Core

    Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication.

  • High 7.3

    Information exposure in Powerline Communication Firmware

    Memory corruption due to information exposure in Powerline Communication Firmware while sending different MMEs from a single, unassociated device.

  • High 8.2

    Buffer over-read in Bluetooth HOST

    Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.

  • High 7.5

    Buffer over-read in WLAN

    Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames.

  • High 8.2

    Buffer over-read in WLAN

    Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.

  • High 8.2

    Improper Input Validation in Automotive

    Memory corruption in Automotive due to improper input validation.

  • High 8.1

    Buffer Copy Without Checking Size of Input in Kernel

    Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.

  • High 7.4

    exec-local-bin vulnerable to Command Injection

    Versions of the package exec-local-bin before 1.2.0 are vulnerable to Command Injection via the theProcess() functionality due to improper user-input sanitization.

  • High 7.5

    The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this…

  • High 7.5

    The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect …

  • High 7.5

    SQL injection vulnerability in sourcecodester Theme Park Ticketing System 1.0 allows remote attackers to view sensitive…

  • High 7.8

    Efs Software Easy Chat Server Version 3.1 was discovered to contain a DLL hijacking vulnerability via the component Tex…

  • High 8.8
    CVE-2022-44149 Public exploit EPSS 64%

    The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution b…

  • High 8.8
    CVE-2022-42979 EPSS 25%

    Information disclosure due to an insecure hostname validation in the RYDE application 5.8.43 for Android and iOS allows…

  • High 7.5

    The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful…

  • High 7.5

    The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system avail…

  • High 7.5

    The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in o…

  • High 7.5

    The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in o…