Lucene search
+L

148 matches found

Positive Technologies
Positive Technologies
•added 2022/09/16 12:00 a.m.•2 views

PT-2022-33722

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.63 Description The issue is related to the smb3 protocol, where the xattr value length is not checked early enough. This is an automated ID intended to aid in discovery of potential security vulnerabilities...

5.7AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2022/06/14 10:15 a.m.•11 views

CVE-2021-35084

Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

7.1CVSS7AI score0.00137EPSS
SaveExploits0References2
Prion
Prion
•added 2022/06/14 10:15 a.m.•33 views

Out-of-bounds

Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

3.6CVSS7.1AI score0.00137EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/05/11 12:00 a.m.•31 views

Siemens OpenV2G memory corruption vulnerability

The primary scope of the OpenV2G project is to provide an open source implementation of the latest draft of the ISO/IEC Vehicle-to-Grid Communication Interface V2G CI standard.A memory corruption vulnerability exists in Siemens OpenV2G due to a missing length check in the OpenV2G EXI parsing...

5.5CVSS3.7AI score0.00217EPSS
SaveExploits0References1
NVD
NVD
•added 2022/02/11 6:15 p.m.•37 views

CVE-2021-22824

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe...

7.5CVSS0.14241EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/11 12:00 a.m.•6 views

CVE-2021-22802: Buffer Copy without Checking Size of Input

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length check on user supplied data, when a constructed message is received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.ex...

9.8CVSS8.5AI score0.20165EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/01/03 8:15 a.m.•20 views

CVE-2021-30303

Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice...

7.8CVSS7AI score0.00157EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/10/20 7:15 a.m.•9 views

CVE-2021-1966

Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

6.7CVSS6.9AI score0.00152EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/10/20 12:00 a.m.•3 views

PT-2021-13711

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a possible buffer overflow due to the lack of length check of source and destination buffer before copying. This affects various Qualcomm Snapdragon...

6.7CVSS0.00152EPSS
SaveExploits0References3
OSV
OSV
•added 2021/09/09 12:15 p.m.•16 views

CVE-2021-26603

A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the ArkDigPathA function parsed a file path. This vulnerability is due to missing support for string length check...

7.8CVSS7.1AI score0.00664EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/09/09 8:15 a.m.•10 views

CVE-2021-1952

Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music...

7.8CVSS7.4AI score0.0016EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/09/06 12:00 a.m.•16 views

Qualcomm 芯片 缓冲区错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. The Qualcomm chip suffers from a buffer error vulnerability that...

7.8CVSS7.6AI score0.0016EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2021/07/14 12:00 a.m.•41 views

Debian DSA-4938-1 : linuxptp - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dsa-4938 advisory. - A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an...

8.8CVSS8AI score0.02955EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2021/07/13 6:15 a.m.•12 views

CVE-2021-1945

Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking...

7.5CVSS7.2AI score0.00587EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/07/13 6:15 a.m.•9 views

CVE-2021-1899

Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

4.6CVSS5.6AI score0.00142EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/07/13 12:00 a.m.•3 views

PT-2021-13663

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to a possible buffer overflow due to a lack of length check in BA request. This affects various Qualcomm Snapdragon products, including Snapdragon...

7.5CVSS0.00596EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/07/09 11:15 a.m.•10 views

CVE-2021-3570

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiali...

8.8CVSS6AI score0.02955EPSS
SaveExploits0References8
Mend
Mend
•added 2021/07/09 10:33 a.m.•2 views

CVE-2021-3570

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiali...

8.8CVSS0.02955EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/09 12:00 a.m.•6 views

CVE-2021-3570: Improper Restriction of Operations within the Bounds of a Memory Buffer

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiali...

8.8CVSS6.2AI score0.02955EPSS
SaveExploits0References3
Veracode
Veracode
•added 2021/07/07 11:23 a.m.•32 views

Denial Of Service

linuxptp is vulnerable to denial of service. The vulnerability exists due to a missing length check when forwarding a PTP message between ports...

8.8CVSS8.2AI score0.02955EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder