Archive
February 2023
Vulnerabilities first published in this month (UTC), newest first.
2,189 results · Feed
-
Critical 9.8
Stack based buffer overflow in WLAN
Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.
-
High 8.4
Buffer copy without checking size of input in modem
Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
-
High 8.2
Buffer over-read in WLAN
Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
-
High 7.8
Integer overflow to buffer overflow in User Identity Module
Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.
-
Medium 6.7
Use of out-of-range pointer offset in Audio
Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id.
-
High 8.4
Improper access control in Qualcomm IPC
Memory corruption due to improper access control in Qualcomm IPC.
-
High 7.8
Configuration weakness in modem
Memory corruption due to configuration weakness in modem wile sending command to write protected files.
-
Critical 9.3
Buffer copy without checking size of input in Hypervisor
Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.
-
High 8.2
Buffer over-read in Modem
Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.
-
Medium 6.7
Use after free in Trusted Application Environment
Memory corruption due to use after free in trusted application environment.
-
Medium 6.8
Buffer over-read in Trusted Execution Environment
Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.
-
Medium 6.0
Improper Input Validation in Automotive
Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file.
-
High 8.2
Buffer Over-read in MODEM
Information disclosure in modem due to buffer over-red while performing checksum of packet received
-
High 7.5
Null Pointer Dereference in MODEM
Denial of service in modem due to missing null check while processing TCP or UDP packets from server
-
High 7.5
Loop with Unreachable Exit Condition in MODEM
Denial of service in modem due to missing null check while processing IP packets with padding
-
High 7.5
Null Pointer Dereference in MODEM
Denial of service in modem due to null pointer dereference while processing DNS packets
-
High 8.2
Buffer Over-read in MODEM
Information disclosure in modem due to buffer over read in dns client due to missing length check
-
Critical 9.8
Improper Input Validation in MODEM
Memory corruption in modem due to improper length check while copying into memory
-
High 8.2
Buffer Over-read in MODEM
Information disclosure in modem due to buffer over-read while processing response from DNS server
-
High 7.3
Heap-based Buffer Overflow in gpac/gpac
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV.
-
High 7.8
Stack-based Buffer Overflow in gpac/gpac
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.
-
Medium 5.3
Privilege Chaining in cockpit-hq/cockpit
Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8.
-
Medium 6.1
OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application. This is …
-
Medium 4.8
An issue in the CSV Import function of ChurchCRM v4.5.3 and below allows attackers to execute arbitrary code via import…
-
Medium 6.1
A reflected cross-site scripting (XSS) vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows att…
-
Medium 5.4
ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting (XSS) vulnerability at /api/public/re…
-
High 7.2
ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the Event parameter under the Ev…
-
Medium 5.4
Mojoportal v2.7.0.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Company Info Set…
-
Medium 5.3
An issue in Mojoportal v2.7.0.0 allows an unauthenticated attacker to register a new user even if the Allow User Regist…
-
High 7.2
ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the EID parameter at GetText.php.
-
Medium 4.3
An issue in Mojoportal v2.7.0.0 and below allows an authenticated attacker to list all css files inside the root path o…
-
High 8.8
Mojoportal v2.7 was discovered to contain an authenticated XML external entity (XXE) injection vulnerability.
-
High 8.8
A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.…
-
High 7.5
WALLIX Access Manager 3.x through 4.0.x allows a remote attacker to access sensitive information.
-
Medium 4.4
Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1 allows attackers to a…
-
Medium 5.9
Improper Handling of Insufficient Permissions or Privileges vulnerability in KnoxCustomManagerService prior to SMR Jan-…
-
Medium 4.3
Improper access control vulnerability in telecom application prior to SMR JAN-2023 Release 1 allows local attackers to …
-
Medium 6.2
Improper access control vulnerability in WindowManagerService prior to SMR Feb-2023 Release 1 allows attackers to take …
-
High 7.5
Improper cryptographic implementation in Samsung Flow for PC 4.9.14.0 allows adjacent attackers to decrypt encrypted me…
-
Medium 5.1
Improper authorization vulnerability in ChnFileShareKit prior to SMR Jan-2023 Release 1 allows attacker to control BLE …