CVE-2023-51572

Voltronic Power ViewPower Pro is affected by CVE-2023-51572 due to an OS command injection in getMacAddressByIP. The flaw stems from insufficient validation of a user-supplied string before it is used to execute a system call, enabling remote code execution with SYSTEM privileges without authenti...

CVE-2023-51571

CVE-2023-51571 : In Voltronic Power ViewPower Pro, the SocketService has missing authentication, allowing remote attackers to trigger a denial-of-service. The flaw resides in the SocketService component (UDP 41222 by default); no authentication precedes access to functionality, enabling an unauth...

CVE-2024-3131

CVE-2024-3131 affects SourceCodester Computer Laboratory Management System v1.0. The vulnerability resides in /classes/Master.php?f=save_category where manipulating the id parameter leads to SQL injection, enabling remote exploitation. Public exploitation and disclosure have been reported. The CV...

CVE-2024-25574

Delta Electronics DIAEnergie is affected by a SQL injection vulnerability in GetDIAE_usListParameters. The related ICS/CISA advisory (ICSA-24-074-12) documents multiple SQL injection instances across DIAEnergie components, with CVSS v3.1 base scores up to 8.8 in the family and a high-impact profi...

CVE-2024-3129

SourceCodester Image Accordion Gallery App 1.0 contains a vulnerability in /endpoint/add-image.php where manipulating the image_name argument allows unrestricted file upload. This is a remote issue with the exploit publicly disclosed; exploitation details are provided across multiple feeds. Root ...

CVE-2024-21473

CVE-2024-21473 affects Qualcomm chipsets via the Wi‑Fi SON LDB Service. The issue is memory corruption triggered while redirecting a log file to any location/name, due to improper input handling in the LDB service. Documented sources describe potential to execute code in the context of the device...

CVE-2024-21472

CVE-2024-21472 describes a memory corruption issue in the kernel during GPU operation handling (root cause: memory corruption in the kernel when processing GPU operations). Documents consistently cite a high impact across confidentiality, integrity, and availability, with a local attack vector an...

CVE-2024-21470

CVE-2024-21470 relates to memory corruption that occurs when allocating memory for graphics in Qualcomm chipsets. The available sources (NVD, Red Hat, CVE list, and vendor bulletins) describe the issue as a memory corruption problem in graphics memory allocation, with high impact across confident...

CVE-2024-21468

CVE-2024-21468 corresponds to a memory corruption issue that occurs when a GPU unmap operation fails, described across multiple sources as a memory corruption/Use-After-Free condition in Qualcomm kernel components. Affected: Qualcomm chipset GPUs and related kernel code paths. Root cause: failed ...

CVE-2024-21454

Vulnerability CVE-2024-21454 affects Automotive Telematics and is described as a transient Denial of Service during decoding of the ToBeSignedMessage. The CVE record notes an underlying issue described as an Integer Overflow to Buffer Overflow in Automotive Telematics. The CVSS score is 7.5 (HIGH...

CVE-2024-21453

CVE-2024-21453: Affects Qualcomm chipsets; a vulnerability in the message decoding path where decoding a message larger than available system memory can cause a transient Denial of Service. The entry cites a network-based attack vector with no user interaction and high impact on availability. Pub...

CVE-2024-21452

CVE-2024-21452 affects Qualcomm chipsets and involves a transient Denial of Service during decoding of an ASN.1 OER message that contains a SEQUENCE of unknown extensions. Root cause is not detailed in the provided documents beyond the ASN.1/OER decoding context; the CVSS metrics indicate HIGH im...

CVE-2023-43515

CVE-2023-43515 describes memory corruption in HLOS when running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled. The issue targets the HLOS kernel path (syzkaller/DEBUG_FS context) and is linked to Qualcomm components (bootloader in the Qualcomm catalog). The connected docum...

CVE-2023-33115

CVE-2023-33115: memory corruption during buffer initialization when generating trusted reports for certain report types. The issue is documented in Qualcomm-related entries as affecting Qualcomm closed-source components (local, low-privilege access, no user interaction; high impact). Connected do...

CVE-2023-33111

CVE-2023-33111 details an information disclosure in Qualcomm audio components (VI calibration state via ADSP, MAX_FBSP_STATE) when responding to an AFE calibration command. Root cause is improper handling/validation of an array index in the audio path. Affected: Qualcomm chipsets used in devices ...

CVE-2023-33101

CVE-2023-33101 is a DoS affecting Qualcomm chipsets, triggered by processing a DL NAS TRANSPORT message with payload length 0. The CVSS 3.1 base score is 7.5 (Network, Low attack complexity, No privileges, No user interaction; Availability impact HIGH). Connected sources indicate the issue is add...

CVE-2023-33100

CVE-2023-33100 is a DoS issue affecting Qualcomm closed‑source components, arising during processing of DL NAS Transport messages when the 3GPP message ID is not defined. The entry shows a network‑based vulnerability with high impact (Availability impact) and a CVSSv3.1 base score of 7.5. Public ...

CVE-2023-33023

CVE-2023-33023 corresponds to a memory corruption issue in Qualcomm closed‑source components related to the finish_sign command when passing an rsp buffer. The vulnerability is described as a local issue with high impact (C/H/I/A), requiring no user interaction and no privileges, per CVSS data. C...

CVE-2023-28547

CVE-2023-28547 is a memory corruption issue in the SPS Application when requesting a public key in the sorter Trust Agent (TA), affecting Qualcomm components (including closed-source parts). Root cause described as memory corruption in SPS Application; exposed impact on confidentiality, integrity...

CVE-2024-26655

CVE-2024-26655 affects the Linux kernel. The issue is a memory leak in posix_clock_open: if clk ops.open() returns an error, the pccontext allocated for the clock is not released. The fix reorganizes the code to make the behavior clearer and applies a patch in the kernel’s clock handling. Practic...