Lucene search
+L

3366 matches found

Positive Technologies
Positive Technologies
•added 2022/06/15 12:00 a.m.•3 views

PT-2025-8653

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the handling of offline queues in the blk mq alloc request hctx function. This issue could trigger an...

7.8CVSS0.00297EPSS
SaveExploits0
attackerkb
attackerkb
•added 2022/06/14 10:15 a.m.•7 views

CVE-2021-35121

An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

6.7CVSS6.7AI score0.0015EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/06/14 10:15 a.m.•11 views

CVE-2021-35072

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

7.8CVSS7.3AI score0.00162EPSS
SaveExploits0References2
NVD
NVD
•added 2022/06/14 10:15 a.m.•35 views

CVE-2021-35072

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

7.8CVSS0.00162EPSS
SaveExploits0References1
Prion
Prion
•added 2022/06/14 10:15 a.m.•27 views

Buffer overflow

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

7.2CVSS8AI score0.00162EPSS
SaveExploits0References1
Prion
Prion
•added 2022/06/14 10:15 a.m.•38 views

Design/Logic Flaw

An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

4.6CVSS6.7AI score0.0015EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/06/14 9:50 a.m.•54 views

CVE-2021-35072

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

7.8CVSS8.2AI score0.00162EPSS
SaveExploits0References1
CVE
CVE
•added 2022/06/14 9:50 a.m.•92 views

CVE-2021-35072

CVE-2021-35072 is a Qualcomm/Snapdragon DIAG command handling vulnerability where an input validation error on array indexes in the Modem/DIAG path can cause a buffer overflow. The issue affects Snapdragon line components (Auto, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables) with...

7.8CVSS8AI score0.00162EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/06/14 9:40 a.m.•131 views

CVE-2021-35121

CVE-2021-35121 affects Qualcomm/Snapdragon kernel components, specifically the Synx driver, where an array index is improperly used to lock/unlock a mutex. This leads to a Use-After-Free condition that can be triggered locally, with the CVSS v3.1 vector indicating Local access, Low attack complex...

6.7CVSS6.6AI score0.0015EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/06/14 9:40 a.m.•51 views

CVE-2021-35121

An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

6.7CVSS6.8AI score0.0015EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/14 12:00 a.m.•6 views

CVE-2021-35072: Improper Validation of Array Index

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

7.8CVSS7.6AI score0.00162EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/14 12:00 a.m.•7 views

CVE-2021-35126: Improper Validation of Array Index

Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

8.4CVSS7.5AI score0.00159EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/06/06 12:00 a.m.•17 views

Qualcomm 输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits including primarily semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. An input validation error vulnerability exists in...

6.7CVSS7.7AI score0.0015EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2022/05/17 12:00 a.m.•68 views

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2022:1686-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1686-1 advisory. The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following...

7.8CVSS6.5AI score0.01169EPSS
SaveExploits4References54
OSV
OSV
•added 2022/05/14 2:05 a.m.•36 views

GHSA-9772-CWX9-R4CJ simplejson before 2.6.1 vulnerable to array index error

Array index error in the scanstring function in the json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the rawdecode function...

5.9CVSS6.8AI score0.08125EPSS
SaveExploits1References11
Github Security Blog
Github Security Blog
•added 2022/05/14 2:05 a.m.•45 views

simplejson before 2.6.1 vulnerable to array index error

Array index error in the scanstring function in the json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the rawdecode function...

5.9CVSS6.8AI score0.08125EPSS
SaveExploits1References11Affected Software1
GitLab Advisory Database
GitLab Advisory Database
•added 2022/05/13 12:00 a.m.•131 views

Improper Validation of Array Index

The html package aka x/net/html through 2018-09-25 in Go mishandles , leading to a "panic: runtime error" index out of range in insertionModeStack.pop in node.go, called from inHeadIM, during an html.Parse call...

7.5CVSS2.2AI score0.02234EPSS
SaveExploits1References9Affected Software1
Tenable Nessus
Tenable Nessus
•added 2022/05/11 12:00 a.m.•55 views

RHEL 8 : kernel-rt (RHSA-2022:1975)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1975 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

9.8CVSS7AI score0.74041EPSS
SaveExploits26References88
CNVD
CNVD
•added 2022/05/05 12:00 a.m.•112 views

Huawei HarmonyOS Information Disclosure Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An information disclosure vulnerability exists in Huawei HarmonyOS version 2.0. The vulnerability stems from the failure to properly validate the Array Index...

9.1CVSS6.8AI score0.00765EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/28 12:00 a.m.•34 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

6.5CVSS2.1AI score0.01651EPSS
SaveExploits0References1
Rows per page
Query Builder