EUVD-2018-17607

Malware in sbrugna...

CVE-2021-22741

Use of Password Hash with Insufficient Computational Effort vulnerability exists in ClearSCADA all versions, EcoStruxure Geo SCADA Expert 2019 all versions, and EcoStruxure Geo SCADA Expert 2020 V83.7742.1 and prior, which could cause the revealing of account credentials when server database file...

Xiaomi perseus-p-oss MIX 3 integer overflow vulnerability

Xiaomi perseus-p-oss MIX 3 is a smartphone from Chinese company Xiaomi Technology Xiaomi. Xiaomi perseus-p-oss MIX 3 An integer overflow vulnerability exists in the sdeevtlogfilterwrite method of the drivers/gpu/drm/msm/sdedbg.c file in the Xiaomi perseus-p-oss MIX 3 on 2018-11-26 and earlier...

PT-2019-19365

Name of the Vulnerable Software and Affected Versions msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 Description The issue is caused by an integer overflow due to missing checks of the count argument in the sde evtlog filter write function in...

PT-2019-19366

Name of the Vulnerable Software and Affected Versions msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 Description The issue is caused by an integer overflow due to missing checks of the count argument in the sde debugfs conn cmd tx write functio...

CVE-2018-5840

Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

CVE-2018-5840

CVE-2018-5840 is a Buffer Copy without Checking Size of Input in the DRM SDE driver initialization path of Android/Linux kernel (CAF variants). The NVD entry states impact as high (local, user interaction required) with a high both for CVSS3 and CVSS2. Affected component appears in the Qualcomm G...

CVE-2018-5840

Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

CVE-2018-5840: Buffer Copy without Checking Size of Input

Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

PT-2018-17178

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A buffer copy issue without checking the size of the input can occur during the DRM SDE driver initialization sequence. This issue affects all Android releases from CAF, including...

PT-2017-11696

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description The issue allows the VIDIOC G SDE ROTATOR FENCE ioctl command...

PT-2017-18240

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises when multiple processes access the sde rotator debug interface for register reading. In such cases, one proces...

CVE-2014-2005

CVE-2014-2005 concerns Sophos Disk Encryption (SDE) 5.x managed via Sophos Enterprise Console (SEC) 5.x, prior to 5.2.2. It allows an unauthenticated, physically proximate attacker to resume from sleep without a login screen, gaining desktop access. Affected: SDE/SEC stack; root cause: failure to...

CVE-2014-2005: Improper Authentication

Sophos Disk Encryption SDE 5.x in Sophos Enterprise Console SEC 5.x before 5.2.2 does not enforce intended authentication requirements for a resume action from sleep mode, which allows physically proximate attackers to obtain desktop access by leveraging the absence of a login screen...

CVE-2013-4945

CVE-2013-4945 affects BMC Service Desk Express (SDE) version 10.2.1.95, where multiple SQL injection flaws allow remote attackers to inject arbitrary SQL through cookies (ASPSESSIONIDASSRATTQ, TABLE_WIDGET_1, TABLE_WIDGET_2, browserDateTimeInfo, browserNumberInfo) or the UID parameter to login.as...

CVE-2013-4946

CVE-2013-4946 concerns multiple XSS vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95. The affected component is the web interface, with input vectors in three parameters: SelTab (QV_admin.aspx), CallBack (QV_grid.aspx), and HelpPage (commonhelp.aspx). The root cause is cross-site scrip...

PT-2013-5293

Name of the Vulnerable Software and Affected Versions BMC Service Desk Express SDE version 10.2.1.95 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several cookie parameters to the "DashBoardGUI.aspx" endpoint, including...

PT-2013-5294

Name of the Vulnerable Software and Affected Versions BMC Service Desk Express SDE version 10.2.1.95 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via the SelTab parameter to "QV...