283 matches found
CVE-2018-13886
Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...
Hardcoded credentials
AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon mobile and snapdragon wear in versions MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835, SD 845, SD 850...
CVE-2017-18160
CVE-2017-18160 affects Qualcomm Snapdragon GNSS AGPS due to hardcoded cyphersuites that require manual updates for each device/version (MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835/845/850). The described impact is AGPS session failure in the GNSS module. Connected sources provide this d...
Leica Geosystems GR10GR25GR30GR50 GNSS 4.30.063 - JSHTML Code Injection
Leica Geosystems GR10GR25GR30GR50 GNSS 4.30.063 - JSHTML Code Injection function su...
Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 XSS
function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST", "http://192.168.1.17/uploadconfig/", true; x...
Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 CSRF
input...
Leica Geosystems GR10GR25GR30GR50 GNSS 4.30.063 - Cross-Site Request Forgery
Leica Geosystems GR10GR25GR30GR50 GNSS 4.30.063 - Cross-Site Request Forgery...
Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 - JS/HTML Code Injection Vulnerability
Exploit for hardware platform in category web applications body...
Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 - JS/HTML Code Injection
function submitRequest...
Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 - Cross-Site Request Forgery
input type="hidden" name="...
Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 Cross-Site Request Forgery
Summary The Leica GR10 is the next generation GNSS reference station receiver that combines the latest state-of-the-art technologies with a streamlined 'plug and play' workflow. Designed for a wide variety of GNSS reference station applications, the Leica GR10 offers new levels of simplicity,...
Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 JS/HTML Code Injection
Summary The Leica GR10 is the next generation GNSS reference station receiver that combines the latest state-of-the-art technologies with a streamlined 'plug and play' workflow. Designed for a wide variety of GNSS reference station applications, the Leica GR10 offers new levels of simplicity,...
CVE-2018-11961
In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Possibility of accessing out of bound vector index When updating some GNSS configurations...
Design/Logic Flaw
In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Possibility of accessing out of bound vector index When updating some GNSS configurations...
CVE-2018-11961
CVE-2018-11961 affects Qualcomm GPS_AP_LINUX (Android CAF/Linux kernel stack). Root cause: an out-of-bounds vector index when updating GNSS configurations. Impact: local access leading to potential elevation of privilege or code execution as indicated by CVSS metrics (CVSSv3: 7.8 HIGH; local vect...
CVE-2018-11961
In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Possibility of accessing out of bound vector index When updating some GNSS configurations...
CVE-2018-14982
Certain LG devices based on Android 6.0 through 8.1 have incorrect access control in the GNSS application. The LG ID is LVE-SMP-180004...
Design/Logic Flaw
Certain LG devices based on Android 6.0 through 8.1 have incorrect access control in the GNSS application. The LG ID is LVE-SMP-180004...
CVE-2018-14982
According to CNVD-2020-28452, CVE-2018-14982 affects LG devices based on Android 6.0–8.1, with the GNSS application performing incorrect access control. The root cause is described as an access-control flaw that could let a remote attacker gain access to the GNSS app. The connected sources indica...
CVE-2018-14982
Certain LG devices based on Android 6.0 through 8.1 have incorrect access control in the GNSS application. The LG ID is LVE-SMP-180004...