Lucene search
+L

7251 matches found

Positive Technologies
Positive Technologies
•added 2022/06/14 12:00 a.m.•16 views

PT-2022-15224 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption due to a possible buffer overflow while parsing a DSF header with a corrupted channel count. This affects various Qualcomm Snapdragon...

8.4CVSS7.9AI score0.0016EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/14 12:00 a.m.•3 views

CVE-2022-22082: Buffer Copy without Checking Size of Input

Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

8.4CVSS7.7AI score0.0016EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2022/06/09 5:15 p.m.•63 views

CVE-2022-26364

x86 pv: Insufficient care with non-coherent mappings This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to...

7.2CVSS6.7AI score0.00498EPSS
SaveExploits3References5
Prion
Prion
•added 2022/06/09 5:15 p.m.•26 views

Race condition

x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to maintain invariants required for Xen's safety, e.g. PV guests may not have direct writeable access to pagetables; updates need auditing by...

6.9CVSS6.3AI score0.00379EPSS
SaveExploits0References8Affected Software2
Cvelist
Cvelist
•added 2022/06/09 12:50 p.m.•46 views

CVE-2022-26362

x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to maintain invariants required for Xen's safety, e.g. PV guests may not have direct writeable access to pagetables; updates need auditing by...

7AI score0.00379EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2022/06/09 12:50 p.m.•69 views

CVE-2022-26364

x86 pv: Insufficient care with non-coherent mappings This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to...

7.2AI score0.00498EPSS
SaveExploits3References8
Positive Technologies
Positive Technologies
•added 2022/06/09 12:00 a.m.•1 views

PT-2022-3414

Name of the Vulnerable Software and Affected Versions Xen affected versions not specified Description The issue is related to insufficient care with non-coherent mappings in Xen, which maintains a type reference count for pages in addition to a regular reference count. This scheme is used to...

7.2CVSS0.00349EPSS
SaveExploits0References84
OSV
OSV
•added 2022/06/06 6:15 p.m.•17 views

CVE-2022-21757

In WIFI Firmware, there is a possible system crash due to a missing count check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06468894; Issue ID: ALPS06468894...

7.5CVSS5.9AI score0.00534EPSS
SaveExploits0References1
NVD
NVD
•added 2022/06/06 6:15 p.m.•32 views

CVE-2022-21757

In WIFI Firmware, there is a possible system crash due to a missing count check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06468894; Issue ID: ALPS06468894...

7.8CVSS0.00534EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/06/06 6:15 p.m.•13 views

CVE-2022-21757

In WIFI Firmware, there is a possible system crash due to a missing count check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06468894; Issue ID: ALPS06468894...

7.8CVSS7.3AI score0.00534EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/06/06 5:39 p.m.•38 views

CVE-2022-21757

In WIFI Firmware, there is a possible system crash due to a missing count check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06468894; Issue ID: ALPS06468894...

7.6AI score0.00534EPSS
SaveExploits0References1
CVE
CVE
•added 2022/06/06 5:39 p.m.•88 views

CVE-2022-21757

CVE-2022-21757 affects the WIFI firmware (noted in MediaTek context) with a missing count check that can cause a system crash, enabling remote denial of service without required privileges or user interaction. The entry lists a patch ID ALPS06468894 / issue ALPS06468894 as the remediation. No fur...

7.8CVSS7.3AI score0.00534EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/06/06 12:00 a.m.•3 views

PT-2022-15097

Name of the Vulnerable Software and Affected Versions WIFI Firmware affected versions not specified Description The issue is related to a missing count check in the WIFI Firmware, which could lead to a system crash and result in a remote denial of service. No additional execution privileges are...

7.8CVSS0.00534EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/06 12:00 a.m.•6 views

CVE-2022-21757: Improper Validation of Integrity Check Value

In WIFI Firmware, there is a possible system crash due to a missing count check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06468894; Issue ID: ALPS06468894...

7.8CVSS7.3AI score0.00534EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/06/06 12:00 a.m.•14 views

MediaTek 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in MediaTek that stems from a lack of a count check in the WIFI firmware, which can cause a system crash. An attacker could exploit this vulnerability to cause a remote denial of servi...

7.8CVSS7.4AI score0.00534EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/06/05 12:00 a.m.•4 views

PT-2022-37886

Уязвимость функции setup msi msg address модуля arch/powerpc/platforms/cell/axon msi.c поддержки платформы PowerPC ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

5.5CVSS0.00193EPSS
SaveExploits0References19
Positive Technologies
Positive Technologies
•added 2022/06/03 12:00 a.m.•2 views

PT-2022-37885

Уязвимость функции spufs init isolated loader модуля arch/powerpc/platforms/cell/spufs/inode.c поддержки платформы PowerPC ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

5.5CVSS0.00189EPSS
SaveExploits0References19
Tenable Nessus
Tenable Nessus
•added 2022/06/03 12:00 a.m.•78 views

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5442-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5442-2 advisory. Kyle Zeng discovered that the Network Queuing and Scheduling subsystem of the Linux kernel did not properly perform reference counting in som...

7.8CVSS7.2AI score0.00928EPSS
SaveExploits3References4
Positive Technologies
Positive Technologies
•added 2022/06/01 12:00 a.m.•3 views

PT-2022-37888

Уязвимость функции max77620 initialise fps модуля drivers/mfd/max77620.c драйвера контроллера многофункциональных устройств MFD ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

5.5CVSS0.00241EPSS
SaveExploits0References16
OSV
OSV
•added 2022/05/30 8:24 a.m.•9 views

USN-5431-1 gnupg2 vulnerability

It was discovered that GnuPG was not properly processing keys with large amounts of signatures. An attacker could possibly use this issue to cause a denial of service...

7.5CVSS6.8AI score0.02524EPSS
SaveExploits1References2
Rows per page
Query Builder