9683 matches found
Buffer overflow
Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...
CVE-2021-35129
CVE-2021-35129 describes memory corruption in the Bluetooth (BT) controller caused by an improper length check when processing vendor-specific commands. Public details in connected sources indicate multiple Qualcomm Snapdragon products are affected, spanning Snapdragon Compute, Snapdragon Connect...
CVE-2021-35129
Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking...
CVE-2021-35071
Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired...
CVE-2021-35071
CVE-2021-35071 is a buffer over-read in Qualcomm Snapdragon components caused by lack of size validation when copying data from the DBR buffer to the RX buffer, leading to Denial of Service. Affected products span Snapdragon Auto, Compute, Connectivity, Industrial IoT, Mobile, Wearables, and Wire...
CVE-2021-30345
RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...
CVE-2021-30345
CVE-2021-30345 describes an improper SMMU configuration in Qualcomm RPM secure Stream that can allow access to any secure resource. The initial entry lists affected Qualcomm Snapdragon lines (Industrial IOT, Mobile, Wearables, Wired Infrastructure and Networking) and notes the root cause as a mis...
CVE-2021-30339
Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...
CVE-2021-30281
CVE-2021-30281 concerns an access control error described for Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Voice & Music, Wearables, Wired Infrastructure & Networking). Description states possible unauthorized access to a secure space due to improper c...
PT-2022-10008 · Qualcomm · Qualcomm Snapdragon
Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper SMMU configuration, allowing RPM secure Stream to access any secure resource. This affects various Qualcomm Snapdragon products, including...
PT-2022-10002 · Qualcomm · Qualcomm Snapdragon
Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper key generation due to a lack of buffer validation when reading PRNG output. This affects various Qualcomm Snapdragon products, including...
HumHub has an unspecified vulnerability (CNVD-2022-82660)
Humhub is a set of open source social networking software written on the Yii PHP framework. HumHub has a security vulnerability that could be exploited by attackers to escalate privileges...
HumHub Cross-Site Scripting Vulnerability Security Vulnerability (CNVD-2022-82658)
HumHub is a set of open source social networking software written on the Yii PHP framework. HumHub suffers from a cross-site scripting vulnerability that stems from a component's lack of data filtering and escaping, which can be exploited by attackers to cause cross-site scripting...
HumHub 安全漏洞
Humhub is a set of open source social networking software written on the Yii PHP framework. HumHub has a security vulnerability that could be exploited by attackers to escalate privileges...
CVE-2022-31486 Command injection via Advanced Networking route add functionality
An authenticated attacker can send a specially crafted route to the “editroute.cgi” binary and have it execute shell commands. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.303...
Tor’s (security) role in the future of the Internet, with Alec Muffett
Tor has a storied reputation in the world of online privacy. The open-source project lets people browse the Internet more anonymously by routing their traffic across different nodes before making a final connection between their device and a desired website. Its something weve discussed previousl...
PT-2022-4878 · Qualcomm · Snapdragon Connectivity +8
Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Snapdragon Auto versions affected versions not specified Snapdragon Compute versions affected versions not specified Snapdragon Connectivity versions affected versions not specified...
CVE-2022-30460
Simple Social Networking Site v1.0 is vulnerable to Cross Site Scripting XSS via /sns/classes/Users.php?f=save, firstname...
