CVE-2022-25652

CVE-2022-25652 concerns cryptographic issues in the BSP for Snapdragon Wired Infrastructure and Networking, caused by improper hash verification within the BSP’s cryptographic checks. The vulnerability is described as affecting BSP cryptographic integrity and confidentiality, with attack potentia...

GtkRadiant 1.6.6 Buffer Overflow

===== Intro ===== GtkRadiant is a cross-platform level editor software for idtech game engines such as Quake. It comes with data authoring tools and a BSP map compiler called q3map2 which parses MAP files. The code has been around for a long time and uses unsafe string copy and format functions. ...

Siemens Nucleus ReadyStart Denial of Service Vulnerability

Siemens Nucleus ReadyStart is a bundled solution from Siemens Germany. A denial-of-service vulnerability exists in Siemens Nucleus ReadyStart, which is used to accelerate the fast startup of complete systems and provides a rich board-level support package Bsp. The vulnerability stems from the...

Siemens Nucleus ReadyStart Type Obfuscation Vulnerability

Siemens Nucleus ReadyStart is a bundled solution from Siemens, Germany. It is used to accelerate the fast startup of complete systems and provides a rich set of board support packages Bsp. A security vulnerability exists in Siemens Nucleus ReadyStart, which originates from an ICMP echo packet wit...

CVE-2020-11259

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking...

CVE-2020-11258

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking...

Memory corruption

Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking...

Memory corruption

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking...

Memory corruption

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking...

CVE-2020-11265

Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networking...

CVE-2020-11259

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking...

CVE-2020-11258

CVE-2020-11258 concerns memory corruption caused by lack of validation of pointer arguments passed to the TrustZone BSP in Snapdragon Wired Infrastructure and Networking. Connected sources reference this CVE and reiterate the same issue; no explicit exploit details or remediation/version informat...

CVE-2020-11258

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking...

CVE-2020-11257

CVE-2020-11257 affects Qualcomm Snapdragon platforms, specifically the TrustZone BSP in Snapdragon Wired Infrastructure and Networking. The root cause is memory corruption due to lack of validation of pointer arguments passed to the TrustZone BSP. CVSS data indicates a high-severity, local-attack...

CVE-2020-11257

Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking...

CVE-2020-6324

SAP Netweaver AS ABAPBSP Test Application sbspexttable, version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticated attacker to send polluted URL to the victim, when the victim clicks on this URL, the attacker can read, modify the information available in the victim�s brows...

CVE-2020-6324

The CVE-2020-6324 entry affects SAP NetWeaver AS ABAP (BSP Test Application sbspext_table) across SAP NetWeaver ABAP versions 700–755. The vulnerability is a Reflected Cross-Site Scripting issue triggered by an unauthenticated user sending a polluted URL; when the victim clicks, the attacker can ...

PT-2020-19098 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP Netweaver AS ABAP versions 700 through 755 Description: The issue allows an unauthenticated attacker to send a polluted URL to the victim. When the victim clicks on this URL, the attacker can read and modify the information available in t...

CVE-2020-6229

SAP NetWeaver AS ABAP Business Server Pages application CRMBSPFRAME, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not sufficiently encode user controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...

CVE-2020-6229

CVE-2020-6229 affects SAP NetWeaver AS ABAP (CRM_BSP_FRAME) across multiple SAP NetWeaver ABAP versions (700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A–75E). The vulnerability stems from insufficient encoding of user-controlled inputs, resulting in a reflected Cross-Site Scripting (XS...