Lucene search
+L

5 matches found

Snyk
Snyk
•added 2026/06/05 5:13 p.m.•32 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the ParseDepedencyExpression function of the UEFI firmware image parser when an attacker provides a specially crafted opcode value. An attacker can cause a denial of service or potentially disclose minor informatio...

7.1CVSS5.6AI score0.00337EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/09/09 8:15 a.m.•20 views

CVE-2021-1960

Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil...

6.5CVSS6.5AI score0.00233EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/09 12:00 a.m.•9 views

CVE-2021-1960: Improper Input Validation

Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil...

6.5CVSS5.8AI score0.00233EPSS
SaveExploits0References2
Prion
Prion
•added 2011/12/05 11:55 a.m.•24 views

Design/Logic Flaw

The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to send request data to the System.getRunTime.exec method...

10CVSS8AI score0.05289EPSS
SaveExploits4References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/12/05 12:00 a.m.•7 views

CVE-2011-2397: Improper Input Validation

The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to send request data to the System.getRunTime.exec method...

10CVSS6.6AI score0.05289EPSS
SaveExploits4References2
Rows per page
Query Builder