PUB-A-227203684

In sdpufindmostspecificserviceuuid of sdputils.cc, there is a possible way to crash Bluetooth due to a missing null check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation...

PT-2022-10946 · Imagination Technologies +1 · Powervr +1

Name of the Vulnerable Software and Affected Versions: Android SoC versions affected versions not specified Description: The issue is related to a missing bounds check in the PMRLogicalOffsetToPhysicalOffset function of the PowerVR kernel driver, which could lead to a possible out of bounds write...

PT-2022-24527 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: messaging service affected versions not specified Description: The issue is related to a missing permission check in the messaging service. This could lead to a local denial of service in the messaging service, and no additional execution...

PT-2022-34464 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.292 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It involves a check for NULL in the rose loopback neigh-loopback variable. The actual impact and attack...

PT-2022-34353 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.257 Description: The issue is related to a potential security problem in the Linux Kernel. It involves a check for NULL in rose loopback neigh-loopback. The actual impact and attack plausibility have not y...

PT-2022-33479 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns an optimization in clearing the pending PMI and removal of a WARN ON for PMI check in power pmu disable. The actual impact and attack plausibility have not yet been proven...

PT-2022-17876 · Vow · Vow

Name of the Vulnerable Software and Affected Versions: vow affected versions not specified Description: The issue is related to an incorrect bounds check, which could lead to a possible out of bounds write. This might result in local escalation of privilege. System execution privileges are requir...

PT-2022-17874 · Vow · Vow

Name of the Vulnerable Software and Affected Versions: vow affected versions not specified Description: The issue is related to an incorrect bounds check, leading to a possible out of bounds read. This could result in local information disclosure, requiring System execution privileges for...

MantisBT Missing Authorization access check in bug_actiongroup.php

An issue was discovered in MantisBT before 2.24.4. A missing access check in bugactiongroup.php allows an attacker with rights to create new issues to use the COPY group action to create a clone, including all bugnotes and attachments, of any private issue i.e., one having Private view status, or...

Denial Of Service (DoS)

Yarp.ReverseProxy is vulnerable to denial of service. The vulnerability exists due to the attribute request failure before determining a destination's health in the RequestProxied function of TransportFailureRateHealthPolicy.cs, allowing an attacker to cause an application crash...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from an incorrect camera driver boundary check that may result in out-of-bounds writes...

PT-2022-17672 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP versions 700, 701, 702, 731 Description: The issue is due to a missing authorization check, allowing an authenticated attacker to access content on the start screen of any transaction within the same...

CVE-2021-39657

In ufshcdehdeviceresethandler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid...

OPENSUSE-SU-2021:1761-1 Security update for hivex

This update for hivex fixes the following issues: - CVE-2021-3504: hivex: missing bounds check within hivexopen bsc1185013...

Google Android Denial of Service Vulnerability (CNVD-2021-44943)

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. A denial of service vulnerability exists in Google Android 11. The vulnerability is caused due to a denial of service due to a missing null check in the RenderStruct of...

CVE-2018-10195

lrzsz before version 0.12.21rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a sizet to wrap around...

OPENSUSE-SU-2021:0806-1 Security update for hivex

This update for hivex fixes the following issues: - CVE-2021-3504: hivex: missing bounds check within hivexopen bsc1185013 This update was imported from the SUSE:SLE-15:Update update project...

SUSE-SU-2021:1761-1 Security update for hivex

This update for hivex fixes the following issues: - CVE-2021-3504: hivex: missing bounds check within hivexopen bsc1185013...

ImageMagick memory leak vulnerability (CNVD-2021-23803)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A memory leak vulnerability exists in the MIFF coder in versions of ImageMagick prior...

SUSE-SU-2020:3093-1 Security update for samba

This update for samba fixes the following issues: - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records bsc1177613. - CVE-2020-14323: Unprivileged user can crash winbind bsc1173994. - CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify...