CVE-2017-18307

CVE-2017-18307 is linked to Qualcomm chipsets (notably qcacld-3.0) and is described as an information-disclosure vulnerability that can occur during audio playback. The Red Hat and CVE listings corroborate an information leak, with Qualcomm’s product-security notes showing a local attack vector a...

CVE-2017-18306

CVE-2017-18306 refers to an information disclosure in Qualcomm’s camera subsystem (v4l2) within the Snapdragon/Qualcomm components due to an uninitialized variable. The Red Hat and NVD records confirm a local-access information exposure with a high confidentiality impact; the CVE is cataloged und...

CVE-2016-10408

CVE-2016-10408 affects Qualcomm QSEE. Red Hat and NVD entries describe a vulnerability where QSEE may randomly experience a fatal error during execution due to speculative instruction fetches from device memory (memory region not valid executable memory). This is a local issue with a high impact ...

CVE-2023-0163

CVE-2023-0163 applies to Mozilla Convict prior to 6.2.4, describing a prototype pollution flaw that allows an attacker to modify object prototype attributes or inject attributes used elsewhere, potentially leading to a crash. The vulnerability affects server-side configuration handling by admins ...

CVE-2023-2142

CVE-2023-2142 affects Nunjucks

CVE-2018-11952

CVE-2018-11952 describes an improper authentication vulnerability in Qualcomm TrustZone where an image with a version lower than the fuse version may boot, potentially bypassing authentication. The core issue, as stated across sources, is a mismatch between the boot image and fuse/version checks,...

CVE-2018-11922

Technical details (affected product/version, root cause, impact, fixes) for CVE-2018-11922 are not publicly available in the provided connected documents. Monitor for updates from vendors and security bulletins.

CVE-2017-17772

CVE-2017-17772 concerns multiple buffer overread vulnerabilities in WLAN-related code. Across sources, the issue is described as out-of-bounds reads occurring in functions that process 802.11 frames due to insufficient validation, with Qualcomm components (WLAN HOST) explicitly listed in the 2017...

CVE-2017-15832

CVE-2017-15832 describes a buffer overwrite in the WLAN host driver due to improper input validation in Qualcomm WLAN components. Reported across multiple feeds (NVD, Red Hat, CVE lists) with related references to WLAN subsystem and Qualcomm QC IDs, the issue is framed as a local issue with high ...

CVE-2017-11076

CVE-2017-11076 affects certain Qualcomm VP9 hardware-accelerated decoders. In affected revisions, the frame size is not programmed correctly into the decoder hardware, which can lead to an invalid memory access in the VP9 decoding hardware path. The vulnerability is described as high-severity wit...

CVE-2016-10394

CVE-2016-10394 is described across multiple connected sources as a Critical issue affecting Qualcomm closed‑source components (e.g., part of Android’s Qualcomm stack) with an initial note that xbl_sec revision lacked certain debug policy features and checks. Public bulletins (Android 2018-09-01/0...

The vulnerability of the administration interface of the Fortinet FortiPortal security analysis and management tool allows a perpetrator to interact with resources of other organizations.

The vulnerability of the administration interface of the Fortinet FortiPortal security analysis and management tool involves bypassing authentication using a user-controlled key. Exploiting this vulnerability allows a malicious actor to interact with resources of other organizations by sending...

CVE-2021-30299

CVE-2021-30299 describes a possible out-of-bounds access in the Qualcomm audio module caused by insufficient validation of user-provided input. The issue is associated with Qualcomm components and affected audio functionality; CVSS 3.1/Low attack complexity with Local access and High confidential...

CVE-2017-9711

CVE-2017-9711 concerns Qualcomm IPA: the vulnerability description across sources states that certain unprivileged processes can perform IOCTL calls, implying local access required and potential privilege-related impact within affected Qualcomm components. Connected documents identify Qualcomm IP...

SUSE CVE-2024-52009

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. Atlantis logs contains GitHub credentials tokens ghs... when they are rotated. This enables an attacker able to read these logs to impersonate Atlantis application and to perform actions on...

AZL-53622 CVE-2024-30896 affecting package influxdb 2.6.1-30

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...

AZL-53438 CVE-2024-30896 affecting package influxdb 2.7.5-19

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...

UBUNTU-CVE-2024-30896

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...

CVE-2022-43936

CVE-2022-43936 affects Brocade SANnav before v2.2.2. The root cause is that enabling debugging causes Fabric OS switch passwords to be logged, risking disclosure of sensitive credentials. Impact is limited to password exposure via logs; no other compromises described. Remediation: upgrade to v2.2...

CVE-2024-30896

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...