CVE-2017-15832

CVE-2017-15832 describes a buffer overwrite in the WLAN host driver due to improper input validation in Qualcomm WLAN components. Reported across multiple feeds (NVD, Red Hat, CVE lists) with related references to WLAN subsystem and Qualcomm QC IDs, the issue is framed as a local issue with high ...

CVE-2017-11076

CVE-2017-11076 affects certain Qualcomm VP9 hardware-accelerated decoders. In affected revisions, the frame size is not programmed correctly into the decoder hardware, which can lead to an invalid memory access in the VP9 decoding hardware path. The vulnerability is described as high-severity wit...

CVE-2016-10394

CVE-2016-10394 is described across multiple connected sources as a Critical issue affecting Qualcomm closed‑source components (e.g., part of Android’s Qualcomm stack) with an initial note that xbl_sec revision lacked certain debug policy features and checks. Public bulletins (Android 2018-09-01/0...

The vulnerability of the administration interface of the Fortinet FortiPortal security analysis and management tool allows a perpetrator to interact with resources of other organizations.

The vulnerability of the administration interface of the Fortinet FortiPortal security analysis and management tool involves bypassing authentication using a user-controlled key. Exploiting this vulnerability allows a malicious actor to interact with resources of other organizations by sending...

CVE-2021-30299

CVE-2021-30299 describes a possible out-of-bounds access in the Qualcomm audio module caused by insufficient validation of user-provided input. The issue is associated with Qualcomm components and affected audio functionality; CVSS 3.1/Low attack complexity with Local access and High confidential...

CVE-2017-9711

CVE-2017-9711 concerns Qualcomm IPA: the vulnerability description across sources states that certain unprivileged processes can perform IOCTL calls, implying local access required and potential privilege-related impact within affected Qualcomm components. Connected documents identify Qualcomm IP...

SUSE CVE-2024-52009

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. Atlantis logs contains GitHub credentials tokens ghs... when they are rotated. This enables an attacker able to read these logs to impersonate Atlantis application and to perform actions on...

AZL-53438 CVE-2024-30896 affecting package influxdb 2.7.5-19

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...

AZL-53622 CVE-2024-30896 affecting package influxdb 2.6.1-30

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...

UBUNTU-CVE-2024-30896

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...

CVE-2022-43936

CVE-2022-43936 affects Brocade SANnav before v2.2.2. The root cause is that enabling debugging causes Fabric OS switch passwords to be logged, risking disclosure of sensitive credentials. Impact is limited to password exposure via logs; no other compromises described. Remediation: upgrade to v2.2...

CVE-2024-30896

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...

CVE-2018-9487

CVE-2018-9487 affects Android components (Vpn.java: setVpnForcedLocked) where a bad UID check could block internet traffic through VPN, causing a local denial of service. Impact per available data: LOCAL attack vector with HIGH availability impact; UI interaction required for exploitation. CVSS m...

CVE-2018-9486

CVE-2018-9486 affects the Bluetooth stack component hidh_l2cif_data_ind in hidh_conn.cc, where a missing bounds check can cause an out-of-bounds read. This could lead to local information disclosure over Bluetooth with no additional execution privileges and without user interaction. Connected sou...

CVE-2018-9485

CVE-2018-9485 affects the Android Bluetooth stack: in l2cble_process_sig_cmd of l2c_ble.cc there is an out-of-bounds read caused by a missing bounds check. This could lead to remote information disclosure over Bluetooth with no user interaction or extra privileges required. Attack vector is adjac...

CVE-2018-9484

CVE-2018-9484 describes an out-of-bounds read in the Android Bluetooth L2CAP implementation: in l2cu_send_peer_config_rej within l2c_utils.cc, a missing bounds check can cause a remote information disclosure without requiring privileges or user interaction. The issue is labeled with a HIGH severi...

CVE-2018-9481

CVE-2018-9481 : The vulnerability is in the Bluetooth stack, specifically in the function bta_hd_set_report_act of bta_hd_act.cc. An integer overflow can trigger an out-of-bounds read, enabling remote information disclosure through the Bluetooth service without extra privileges or user interactio...

CVE-2018-9480

CVE-2018-9480 describes an out-of-bounds read in bta_hd_get_report_act (bta_hd_act.cc) that could enable remote information disclosure via the Bluetooth service without user interaction. The issue stems from improper input validation. Documented details appear in NVD/Red Hat entries and the Andro...

CVE-2018-9478

CVE-2018-9478 involves an out-of-bounds write in the sdp_server.cc file, specifically in process_service_attr_req and process_service_search_attr_req, caused by a missing bounds check. The vulnerability could allow remote code execution with no privileges and without user interaction, as describe...

CVE-2018-9477

CVE-2018-9477 is an Elevation of Privilege issue in Android’s Settings app (Development options) caused by a missing permission check. It enables a local attacker to bypass authentication and escalate privileges with no additional execution privileges required, though user interaction is needed f...