mapstructure Library Unauthorized Access

The vulnerability of the mapstructure library in the application software of the “Avora Center” relates to improper processing of output data for registration logs. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information...

rs/cors Application DoS

The vulnerability of the rs/cors application software of the “Avora Center” package is related to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service failures...

mapstructure Library Unauthorized Access

The vulnerability of the mapstructure library in the application software of the “Avora Center” is related to insufficient verification of input data. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information...

swpm Heap Buffer Overflow DoS

The vulnerability of the software power management component in the “Avora” operating system is related to the ability to read data beyond the buffer limit of memory. Exploiting this vulnerability can lead to service failure...

Avora Isolation Component Privilege Escalation

The vulnerability of the “Avora” operating system’s isolation component is related to the lack of control over permissions for applications accessing temporary folders. Exploiting this vulnerability can lead to breaches of data confidentiality, integrity, and accessibility...

Aurora Validation Component Data Compromise

The vulnerability of the validation component of the “Avora” operating system is related to the lack of control over the names of the installed application files. Exploiting this vulnerability can lead to breaches of data confidentiality, integrity, and accessibility...

Aurora Component Privilege Escalation

The vulnerability of the “Avora” operating system’s installed package checking component is related to deficiencies in the control of the parameters of these installed packages. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a specially...

GoLang net/http mime/multipart DoS

The vulnerability of the net/http and mime/multipart libraries used in the GoLang-based application software for the PPEO “Avora Center” involves uncontrolled resource consumption under certain input conditions. Exploiting this vulnerability could allow a remote attacker to execute a type of atta...

sailfish- Heap Buffer Overflow DoS

The vulnerability of the alink attribute in the sailfish-browser application for the “Avroda” operating system is related to a buffer overflow in the dynamically allocated buffer. Exploiting this vulnerability could allow an attacker to cause a service failure...

zlib Compression Library DoS

The vulnerability of the zlib compression library in the “Avora” operating system is related to integer overflows. Exploiting this vulnerability can allow attackers to cause service failures or have unpredictable effects using specially crafted .apk or .dex files...

zlib Compression Integer Overflow

The vulnerability of the zlib compression library in the “Avora” operating system is related to integer overflows. Exploiting this vulnerability can allow attackers to cause service failures or have unpredictable effects using specially crafted .apk or .dex files...

yargs-parser Prototype Pollution

The vulnerability of the yargs-parser library in application software developed by Avora Center relates to uncontrolled changes to object prototypes’ attributes. Exploiting this vulnerability could allow a malicious actor to execute a “prototype compromise” attack...

y18n Prototype Pollution

The vulnerability of the y18n application library in Aurora Software Center is related to uncontrolled changes to object prototypes’ attributes. Exploiting this vulnerability could allow a malicious actor to execute a “prototype contamination” attack remotely...

clean-css Uncontrolled Resource Consumption DoS

The vulnerability of the clean-css application software of Aurora Center relates to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures by using a specially crafted regular expression...

Avora Center omp-appmanager Module Access Control

The vulnerability of the omp-appmanager module for mobile applications, which is part of the “Avora Center” application software, relates to the provision of unprivileged accounts for the privileged API used for installing and removing applications. Exploiting this vulnerability could allow a...

GJSON Library Uncontrolled Resource Consumption DoS

The vulnerability of the GJSON library used in Avora software applications is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending a specially crafted JSON request...

Sailfish Buffer Overflow

The vulnerability of the Sailfish Browser application for the “Avora” operating system is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...