CVE-2019-2307

Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150...

Integer overflow

Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150...

CVE-2019-2307

Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150...

CVE-2019-2307

CVE-2019-2307 is a possible integer underflow caused by insufficient validation before calculating data length in 802.11 Rx management config. Affected are Qualcomm Snapdragon platforms across a wide product range (Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Consumer IoT, Indus...

PT-2019-16375

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description The issue is related to a possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration. This affects vario...

CVE-2019-2307: Out-of-bounds Read

Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150...

CVE-2018-20813

An input validation issue has been found with loginmeeting.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2...

CVE-2018-20808

An XSS issue has been found with rd.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R3 due to improper header sanitization. This is not applicable to 8.1RX...

PT-2019-16193

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a possible out-of-bound write in the nfa rw store ndef rx buf function of nfa rw act.cc due to a missing bounds check. This could lead to local escalation of privilege with no...

PT-2019-18096

Name of the Vulnerable Software and Affected Versions Kyocera Command Center RX TASKalfa4501i and TASKalfa5052ci affected versions not specified Description The issue allows remote attackers to obtain a cleartext FTP or SMB password by abusing the Test button in the machine address book...

CVE-2019-6452: Insufficiently Protected Credentials

Kyocera Command Center RX TASKalfa4501i and TASKalfa5052ci allows remote attackers to abuse the Test button in the machine address book to obtain a cleartext FTP or SMB password...

Tap 'n Ghost Attack Creatively Targets Android Devices

Researchers have created a novel proof-of-concept PoC attack named Tap ‘n Ghost, which targets Near Field Communication NFC-enabled Android smartphones. This allows an attacker to take control of a target phone simply by tricking the victim into placing their handset on a specially crafted surfac...

PT-2019-3457

Name of the Vulnerable Software and Affected Versions Linux Kernel versions up to and including v5.1-rc6 Description The issue is related to an infinite loop in the vhost net kernel module when handling incoming packets in the handle rx function. This can happen if one end sends packets faster th...

PT-2019-5423 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.0.6 Description: An issue in the Linux kernel's network subsystem is related to errors in pointer counting in the functions rx queue add kobject and netdev queue add kobject in net/core/net-sysfs.c. This issue...

Open redirect

Druide Antidote RX, HD, 8 before 8.05.2287, 9 before 9.5.3937 and 10 before 10.1.2147 allows remote attackers to steal NTLM hashes or perform SMB relay attacks upon a direct launch of the product, or upon an indirect launch via an integration such as Chrome, Firefox, Word, Outlook, etc. This occu...

CVE-2019-9565

CVE-2019-9565 affects Druide Antidote RX, HD, and older builds (8 before 8.05.2287, 9 before 9.5.3937, 10 before 10.1.2147). The issue enables remote attackers to steal NTLM hashes or perform SMB relay attacks when the product is launched directly or via integrated apps (Chrome, Firefox, Word, Ou...

PT-2019-19711

Name of the Vulnerable Software and Affected Versions Druide Antidote RX, HD versions 8 before 8.05.2287 Druide Antidote RX, HD versions 9 before 9.5.3937 Druide Antidote RX, HD versions 10 before 10.1.2147 Description The issue allows remote attackers to steal NTLM hashes or perform SMB relay...

CVE-2018-16880

A flaw was found in the Linux kernel's handlerx function in the vhostnet driver. A malicious virtual guest, under specific conditions, can trigger an out-of-bounds write in a kmalloc-8 slab on a virtual host which may lead to a kernel memory corruption and a system panic. Due to the nature of the...

DEBIAN-CVE-2018-16880

A flaw was found in the Linux kernel's handlerx function in the vhostnet driver. A malicious virtual guest, under specific conditions, can trigger an out-of-bounds write in a kmalloc-8 slab on a virtual host which may lead to a kernel memory corruption and a system panic. Due to the nature of the...

PT-2019-1545 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions from v4.16 and newer Description: A flaw in the Linux kernel's handle rx function in the vhost net driver can be exploited by a malicious virtual guest to trigger an out-of-bounds write in a kmalloc-8 slab on a virtual...