28 matches found
EUVD-2019-18622
Malware in sbrugna...
CVE-2024-45615
A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. The problem is missing initialization of variables expected to be initialized as arguments to other functions, etc...
Upgraded Q -> 2 from #362 [1676219107265]
Judge has assessed an item in Issue 362 as 2 risk. The relevant finding follows: N‑01 Upgradeable contract is missing a gap50 storage variable to allow for new storage variables in later versions --- The text was updated successfully, but these errors were encountered: All reactions...
Upgraded Q -> 2 from #533 [1676218902616]
Judge has assessed an item in Issue 533 as 2 risk. The relevant finding follows: Upgradeable contract is missing a gap50 storage variable to allow for new storage variables in later versions --- The text was updated successfully, but these errors were encountered: All reactions...
CVE-2019-25028
Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 Vaadin 7.4.0 through 7.7.19, and 8.0.0 through 8.8.4 Vaadin 8.0.0 through 8.8.4 allows attacker to inject malicious JavaScript via unspecified vector...
CVE-2019-25028: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 Vaadin 7.4.0 through 7.7.19, and 8.0.0 through 8.8.4 Vaadin 8.0.0 through 8.8.4 allows attacker to inject malicious JavaScript via unspecified vector...
Stored cross-site scripting in Grid component in Vaadin 7 and 8
Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 Vaadin 7.4.0 through 7.7.19, and 8.0.0 through 8.8.4 Vaadin 8.0.0 through 8.8.4 allows attacker to inject malicious JavaScript via unspecified vector. -...
CVE-2020-24455
Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...
CVE-2019-9319
In libavc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111762100...
Information disclosure
In libstagefright, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112052258...
CVE-2019-9319
CVE-2019-9319 affects Android 10 media stack (libavc) where a missing variable initialization in the library can lead to remote information disclosure without extra execution privileges. Exploitation requires user interaction. The Android 10 security release notes state these issues are addressed...
PT-2019-19540
Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing variable initialization in libavc. This could lead to remote information disclosure without requiring additional execution privileges. User interaction is necessary for...
PT-2019-19539
Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing variable initialization in libavc, which could lead to remote information disclosure without requiring additional execution privileges. User interaction is necessary for...
PT-2019-19536
Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing variable initialization in libstagefright. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is required...
CVE-2019-9247: Missing Initialization of Resource
In AAC Codec, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120426166...
CVE-2019-9318: Missing Initialization of Resource
In libhevc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111764725...
CVE-2019-9319: Missing Initialization of Resource
In libavc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111762100...
CVE-2019-9321: Missing Initialization of Resource
In libavc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111208713...
PT-2019-19535
Name of the Vulnerable Software and Affected Versions Android versions prior to Android-10 Description The issue is related to a missing variable initialization in libstagefright, which could lead to remote information disclosure without requiring additional execution privileges. User interaction...
PT-2019-19537
Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing variable initialization in libhevc, which could lead to remote information disclosure without requiring additional execution privileges. User interaction is necessary fo...