CVE-2021-30298

Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wire...

CVE-2021-30298

CVE-2021-30298 describes a buffer-access issue: an out-of-bounds condition caused by improper validation of item size and DIAG memory-pool data when switching between USB and PCIe interfaces in Qualcomm Snapdragon devices. Affected platforms span Snapdragon Auto, Snapdragon Consumer IoT, Industri...

CVE-2021-30282

CVE-2021-30282 affects Qualcomm Snapdragon hardware/software components, with a flaw described as an input validation error that fails to validate the number of RAM partitions. This can lead to an out-of-bounds write in the RAM partition table. The vulnerability is associated with multiple Snapdr...

CVE-2021-30282

Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Network...

CVE-2021-30262

CVE-2021-30262 describes improper validation of a socket state when socket events are sent to clients, causing invalid memory access in Qualcomm Snapdragon devices. Affected families include Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wearables...

Schneider Electric Struxureware Data Center Expert Command Injection (CVE-2021-22795)

A command-injection vulnerability exists in Schneider Electric Struxureware Data Center Expert. The vulnerability is due to improper validation of user-supplied input...

Siemens SINEC NMS Directory Traversal (CVE-2021-33722)

A directory traversal vulnerability exists in Siemens SINEC NMS. The vulnerability is due to improper validation of user-supplied path while exporting firmware containers...

Schneider Electric Struxureware Data Center Expert Directory Traversal (CVE-2021-22794)

A directory traversal vulnerability exists in Schneider Electric Struxureware Data Center Expert. The vulnerability is due to improper validation of user-supplied input...

Apache Log4j 2.x < 2.13.2 Information Disclosure Vulnerability - Linux

Apache Log4j is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:log4j";...

CVE-2021-4008

A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the SProcRenderCompositeGlyphs function due to improper validation of the request length...

Input validation

An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4. Improper validation of input into the username field makes it possible to place a stored XSS payload. This is executed if an administrator views the System Event Log...

PT-2021-23429 · Crocoblock · Crocoblock Jetengine

Name of the Vulnerable Software and Affected Versions: Crocoblock JetEngine versions prior to 2.9.1 Description: The issue arises from improper validation and sanitization of form data. Recommendations: For versions prior to 2.9.1, update to version 2.9.1 or later to resolve the issue...

Siemens Capital VSTAR

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely / Low attack complexity Vendor: Siemens Equipment: Capital VSTAR Vulnerabilities: Access of Resource Using Incompatible Type, Improper Validation of Specified Quantity in Input, Out-of-Bounds Read, Improper Restriction of Operations...

CVE-2021-39065

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of user-supplied input by the Spectrum Copy Data Management Admin Console login and uploadcertificate function . A remote attacker could...

CVE-2021-25512

An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities...

CVE-2021-25510

An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows local arbitrary code execution...

CVE-2021-25511

An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows attackers to write arbitrary files via a path traversal vulnerability...

CVE-2021-25510

An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows local arbitrary code execution...

Path traversal

An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows attackers to write arbitrary files via a path traversal vulnerability...

CVE-2021-25512

CVE-2021-25512 affects the Samsung telephony stack. Connected documents indicate an improper validation vulnerability in telephony prior to Samsung SMR Dec-2021 Release 1, allowing attackers to launch certain activities. Affected: telephony component on Samsung devices (prior to SMR Dec-2021 Rele...