517 matches found
Insecure Storage of Sensitive Information
Description:- When the user uploads his profile picture, the uploaded image’s EXIF Geolocation Data does not get stripped. As a result, anyone can get sensitive information of microweber users like their Geolocation, their Device information like Device Name, Version, Software & Software version...
CVE-2021-35068
Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...
CVE-2021-35068
Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...
CVE-2021-35068: NULL Pointer Dereference
Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...
Qualcomm 多款产品代码问题漏洞
The Qualcomm QCA6574AU and others are products of Qualcomm Incorporated Qualcomm, U.S.A. The QCA6574AU is a central processing unit CPU product.The SDX20 is a modem.The QCS605 is a central processing unit CPU product.The QCS605 is a central processing unit CPU product.The QCS605 is a central...
[SECURITY] Fedora 35 Update: usbview-3.0-1.fc35
Display information about the topology of the devices connected to the USB bus on a Linux machine. It also displays detailed information on the individual devices...
CVE-2021-44794
Single Connect does not perform an authorization check when using the "sc-diagnostic-ui" module. A remote attacker could exploit this vulnerability to access the device information page. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information...
CVE-2021-44794
Single Connect does not perform an authorization check when using the "sc-diagnostic-ui" module. A remote attacker could exploit this vulnerability to access the device information page. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information...
Authorization
Single Connect does not perform an authorization check when using the "sc-diagnostic-ui" module. A remote attacker could exploit this vulnerability to access the device information page. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information...
PT-2022-12235
Name of the Vulnerable Software and Affected Versions Single Connect affected versions not specified Description The issue is related to the lack of an authorization check when using the sc-diagnostic-ui module. This could allow a remote attacker to access the device information page and...
CVE-2021-41769
A vulnerability has been identified in SIPROTEC 5 6MD85 devices CPU variant CP300 All versions V8.83, SIPROTEC 5 6MD86 devices CPU variant CP300 All versions V8.83, SIPROTEC 5 6MD89 devices CPU variant CP300 All versions V8.83, SIPROTEC 5 6MU85 devices CPU variant CP300 All versions V8.83, SIPROT...
Siemens SIPROTEC 5 输入验证错误漏洞
SIPROTEC 5 devices offer a range of functions for integrating protection, control, measurement and automation in substations and other applications. An information disclosure vulnerability exists in Siemens SIPROTEC 5, which can be exploited by an attacker to read device information...
CVE-2021-25523
Insecure storage of device information in Samsung Dialer prior to version 12.7.05.24 allows attacker to get Samsung Account ID...
CVE-2021-25523
Insecure storage of device information in Samsung Dialer prior to version 12.7.05.24 allows attacker to get Samsung Account ID...
CVE-2021-25524
Insecure storage of device information in Contacts prior to version 12.7.05.24 allows attacker to get Samsung Account ID...
CVE-2021-25524
Insecure storage of device information in Contacts prior to version 12.7.05.24 allows attacker to get Samsung Account ID...
CVE-2021-25524
Insecure storage of device information in Contacts prior to version 12.7.05.24 allows attacker to get Samsung Account ID...
CVE-2021-25524
CVE-2021-25524 affects Samsung Contacts prior to version 12.7.05.24, where insecure storage of device information can disclose Samsung Account IDs. The root cause is improper handling/storage of device data within the Contacts component. Impact is limited to information disclosure (Samsung Accoun...
CVE-2021-25523
CVE-2021-25523 affects the Samsung Dialer prior to version 12.7.05.24 . Root cause: insecure storage of device information that can disclose a Samsung Account ID. Impact: local attacker could obtain the Samsung Account ID. Affected component: Samsung Dialer app. Remediation: upgrade to 12.7.05.24...