CVE-2018-147189

Technical details for CVE-2018-147189 are not publicly available in the provided documents; no affected products, vulnerability type, or fixes are described. Monitor for updates.

CVE-2021-1000007

The connected advisories describe a DoS: parsing duration strings with very large exponents in the Rust parse_duration crate (via parse_duration::parse) can exhaust CPU and memory, enabling an attacker to cause high resource usage. The issue is caused by using BigInt with exponentiation in the pa...

CVE-2020-24597

CVE-2020-24597: Joomla core contains a directory traversal in com_media that allows access to files outside the webroot. Public sources list affected versions as Joomla core up to 3.9.24 (Nessus plugin 112581) and up to 3.9.20 (OpenVAS entry). Root cause is lack of input validation for com_media ...

CVE-2014-1709

CVE-2014-1709 is an IPC message injection vulnerability in Google Chrome (Chrome 34 era) that could allow bypass of sandbox restrictions. It was among the security fixes highlighted in the Chrome 34 Stable Channel Update, with multiple fixes and external credits (including geohot). The connected ...

CVE-2020-6916

HP’s advisory HPSBHF03671 rev.1 describes a potential vulnerability in the HP LT4120 Snapdragon X5 LTE Driver Installer before version 1.0.1.80, which may allow escalation of privilege and arbitrary code execution. The document lists affected platforms/SoftPaqs and states HP has identified target...

CVE-2020-6913

HP Sure Sense driver may have a vulnerability that could allow Unauthorized Code Execution, per HP PSRT bulletin HPSBHF03663 rev. 1. Details are limited; bulletin may be updated as new information or SoftPaqs become available. HP recommends keeping firmware/software up to date. The connected docu...

CVE-2020-6925

HP Device Manager is affected on 4.x before 4.7 SP13 or 5.x before 5.0.4. CVE-2020-6925 describes a weak cipher susceptible to dictionary attacks in the device-manager component. The HP advisory and Rapid7 analysis indicate that chained CVEs (6925/6926/6927) can lead to unauthenticated remote acc...

CVE-2020-6927

CVE-2020-6927 is a local privilege escalation in HP Device Manager 5.0.0–5.0.3, caused by a bundled PostgreSQL database with a default, weakly protected dm_postgres account (password: single space). This allows a local attacker to connect to the database, run SQL queries, and achieve SYSTEM-level...

CVE-2020-6926

HP Device Manager contains CVE-2020-6926: an unauthenticated RMI vulnerability that enables remote access to resources and, via an RMI call, can inject HQL that executes SQL on the bundled PostgreSQL database. Affected products/versions include HP Device Manager 4.x before 4.7 SP13 and 5.x before...

CVE-2020-28418

HP advisory HPSBGN03722 rev.1 details a vulnerability in HP Support Assistant involving a weak ACL and DLL loading that could permit an attacker to execute arbitrary code. The advisory cites a patch released on March 10, 2021 that updates HP Support Assistant clients on the weekly update scan for...

CVE-2020-6929

Technical details for CVE-2020-6929 are not provided in the supplied documents; the Initial Description indicates reservation. Monitor for updates as more information may be released.

CVE-2018-4177

CVE-2018-4177 is listed in the Apple iOS 11.3 security content as affecting the Apple TV App on iOS 11.3. The vulnerability is described as an input-validation issue that could allow an attacker with a privileged network position to spoof password prompts in the Apple TV App. The Apple document a...

CVE-2014-1687

Huawei AR router SSH module DoS vulnerability (CVE-2014-1687): when subjected to a large volume of malformed SSH authentication packets, legitimate users may be unable to log in via SSH due to resource exhaustion. This vulnerability is documented in HWPSIRT-2013-1255 and linked CVE-2014-1687. Aff...

CVE-2014-1688

CVE-2014-1688 is associated with Huawei CloudEngine switches. The Huawei HWPSIRT advisory and the NASL plugin describe a security bypass in the HWTACACS authorization module caused by a failure of access control. An authenticated attacker can exploit this to execute commands with higher‑level per...

CVE-2014-4704

CVE-2014-4704 is associated with a DoS vulnerability in Huawei devices (Campus Switch, AR, SRG, WLAN). The flaw in the RADIUS component allows a remote, authenticated attacker to send malformed RADIUS packets to trigger device restarts. Affected products and exact firmware versions are described ...

CVE-2016-10278

CVE-2016-10278 is listed in the Android 2017-05-01 bulletin as a High-severity vulnerability in Qualcomm components, affecting Pixel and Pixel XL. The entry notes the issue is tied to Qualcomm internal references (QC-CR#1043004) and that a patch is not publicly available; the fix is provided only...

CVE-2018-11817

CVE-2018-11817 is listed as a critical issue in Qualcomm DSP_Services within the Android 2019-03 bulletin context. The connected document confirms the CVE is associated with Qualcomm DSP_Services (as part of Qualcomm components) and is rated Critical, but does not provide further technical detail...

CVE-2021-0846

Technical details for CVE-2021-0846 are not publicly available in the provided documents. No affected products, root cause, or impact are specified. Monitor for updates.

CVE-2021-27666

CVE-2021-27666 is referenced in the TencentOS Server 3 advisory (TSSA-2022:0125) as a kernel issue: a possible buffer overflow in ESP transformation. The Nessus plugin notes TencentOS Server 3 versions prior to the tested release are affected and packages are available to fix the vulnerabilities,...

CVE-2021-44228228

CVE-2021-44228 (Log4j RCE) is described as a remote code execution vulnerability in the Apache Log4j Java library. Check Point reports that their Infinity portfolio products are not vulnerable due to a hardened Java environment, and they provide IPS protection and guidance to apply Apache patches...