PT-2025-19865 · Qualcomm · Snapdragon +128

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption during the FRS UDS generation process. This corruption occurs as part of the process, indicating a potential problem with how data is handled or processe...

CVE-2024-49845: Improper Input Validation

Memory corruption during the FRS UDS generation process...

CVE-2025-30209

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker can access release notes content or information via the FRS REST endpoints it should not have access to. This vulnerability is fixed in Tuleap Community Edition 16.5.99.1742812323 and Tule...

CVE-2025-30209

This CVE (CVE-2025-30209) concerns Tuleap, where an improper permission check allows an attacker to access release notes content or related information via the FRS REST endpoints. The vulnerability stems from access control weaknesses in the Tuleap software suite, specifically affecting the REST ...

CVE-2025-30209 Tuleap has improper permission handling in the REST endpoints and release notes display of the FRS plugin

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker can access release notes content or information via the FRS REST endpoints it should not have access to. This vulnerability is fixed in Tuleap Community Edition 16.5.99.1742812323 and Tule...

CVE-2025-30209

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker can access release notes content or information via the FRS REST endpoints it should not have access to. This vulnerability is fixed in Tuleap Community Edition 16.5.99.1742812323 and Tule...

CVE-2025-30209: Incorrect Authorization

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker can access release notes content or information via the FRS REST endpoints it should not have access to. This vulnerability is fixed in Tuleap Community Edition 16.5.99.1742812323 and Tule...

CVE-2025-22493 Improper cookie attributes in Foreseer Reporting Software (FRS)

Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software FRS. Absence of this secure flag could lead into the session cookie being transmitted over unencrypted HTTP connections. This security issue has been resolved in the latest version of FRS v1.5.100...

CVE-2025-22492

The connection string visible to users with access to FRSCore database on Foreseer Reporting Software FRS VM, this string can be used for gaining administrative access to the 4crXref database. This vulnerability has been resolved in the latest version 1.5.100 of FRS...

CVE-2025-22492

The connection string visible to users with access to FRSCore database on Foreseer Reporting Software FRS VM, this string can be used for gaining administrative access to the 4crXref database. This vulnerability has been resolved in the latest version 1.5.100 of FRS...

CVE-2025-22492

CVE-2025-22492 affects Eaton Foreseer Reporting Software (FRS) – specifically the FRSCore database connection string exposed to users with access to the FRS VM. The root issue is exposure of the FRSCore database connection string, which can enable gain of administrative access to the 4crXref data...

CVE-2025-22491: Improper Neutralization of Input During Web Page Generation

The user input was not sanitized on Reporting Hierarchy Management page of Foreseer Reporting Software FRS application which could lead into execution of arbitrary JavaScript in a browser context for all the interacting users. This security issue has been patched in the latest version 1.5.100 of...

CVE-2024-23369

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers...

CVE-2024-23369

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers...

CVE-2024-23369 Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers...

CVE-2024-23369 Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers...

CVE-2024-23369

CVE-2024-23369 describes a memory corruption issue in Qualcomm chipsets triggered when an invalid length is provided for HLOS-facing FRS/UDS buffers. The root cause is a boundary/length handling defect that can affect the memory region when processing those buffers. The CVE is rated with CVSS v3....

CVE-2024-23369: Improper Restriction of Operations within the Bounds of a Memory Buffer

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers...

Code injection

Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.2.99.103 of Tuleap Community Edition and prior to versions 15.2-4 and 15.1-8 of Tuleap Enterprise Edition, the name of the releases are not properly escaped on the edition page of ...

CVE-2023-48715

Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.2.99.103 of Tuleap Community Edition and prior to versions 15.2-4 and 15.1-8 of Tuleap Enterprise Edition, the name of the releases are not properly escaped on the edition page of ...