CVE-2019-20784

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 MTK chipsets software. Interaction of GPS with 911 emergency calls is mishandled. The LG ID is LVE-SMP-180012 January 2019...

CVE-2019-20782

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. LG Advanced Flash LAF has a buffer overflow. The LG ID is LVE-SMP-190001 March 2019...

CVE-2019-20780

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Certain security settings, related to whether packages are verified and accepted only from known sources, are mishandled. The LG ID is LVE-SMP-190002 April 2019...

CVE-2019-20777

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. WapService mishandles OTA Provisioning on V40 and G7 devices. The LG ID is LVE-SMP-190006 July 2019...

CVE-2019-20776

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. A TZ trusted application can crash via crafted input. The LG ID is LVE-SMP-190005 July 2019...

CVE-2019-20775

An issue was discovered on LG mobile devices with Android OS 9.0 Qualcomm SDM450, SDM845, SM6150, and SM8150 chipsets software. Weak encryption leads to local information disclosure. The LG ID is LVE-SMP-190010 August 2019...

CVE-2019-20770

An issue was discovered on LG mobile devices with Android OS 9.0 software. The HAL service has a buffer overflow that leads to arbitrary code execution. The LG ID is LVE-SMP-190013 September 2019...

Denial Of Service (DoS)

kernel is vulnerable to Denial of Service DoS. The vulnerability exists as a flaw was found in the Linux kernel's clock implementation on 32-bit, SMP symmetric multiprocessing systems. A local, unprivileged user could use this flaw to cause a divide error fault, resulting in a denial of service...

Denial Of Service (DoS)

openswan is vulnerable to denial of service DoS. The vulnerability exists as a use-after-free flaw was found in the way Openswan's pluto IKE daemon used cryptographic helpers. A remote, authenticated attacker could send a specially-crafted IKE packet that would crash the pluto daemon. This issue...

CVE-2019-19196

The Bluetooth Low Energy Secure Manager Protocol SMP implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices accepts a pairing request with a key size greater than 16 bytes, allowing an...

Buffer overflow

The Bluetooth Low Energy Secure Manager Protocol SMP implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices accepts a pairing request with a key size greater than 16 bytes, allowing an...

CVE-2019-19194

The CVE-2019-19194 issue affects Telink Semiconductor BLE SDKs (TLSR8x5x up to 3.4.0; TLSR823x up to 1.3.0; TLSR826x up to 3.3) when Secure Connections pairing is in use. The Bluetooth Low Energy SMP implementation can install a zero long-term key (LTK) if an out-of-order link-layer encryption re...

CVE-2019-19196

The CVE-2019-19196 entry relates to Telink Semiconductor’s BLE SDK SMP implementation. Affected SDKs (before Nov 2019) include TLSR8x5x (up to v3.4.0), TLSR823x (up to v1.3.0), and TLSR826x (up to v3.3). The vulnerability arises when a pairing request with a key size greater than 16 bytes is acce...

CVE-2019-19194

The Bluetooth Low Energy Secure Manager Protocol SMP implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices installs a zero long term key LTK if an out-of-order link-layer encryption request...

Unspecified Vulnerability in Cayin SMP-PRO4

The Cayin SMP-PRO4 is a digital signage player. An unspecified vulnerability exists in the Cayin SMP-PRO4. An attacker can exploit the vulnerability to view stored passwords...

Cayin SMP-PRO4 Cross-Site Scripting Vulnerability

The Cayin SMP-PRO4 is a digital signage player. A cross-site scripting vulnerability exists in Cayin SMP-PRO4. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side code...

CVE-2020-6954

An issue was discovered on Cayin SMP-PRO4 devices. A user can discover a saved password by viewing the URL after a Connection String Test. This password is shown in the webpass parameter of a mediafolder.cgi?applymode=pingserver URI...

Cross site scripting

An issue was discovered on Cayin SMP-PRO4 devices. They allow imagepreview.html?filename= reflected XSS...

Default credentials

An issue was discovered on Cayin SMP-PRO4 devices. A user can discover a saved password by viewing the URL after a Connection String Test. This password is shown in the webpass parameter of a mediafolder.cgi?applymode=pingserver URI...

CVE-2020-6954

CVE-2020-6954 affects Cayin SMP-PRO4 digital signage players. A user can view a saved password by inspecting the URL after a Connection String Test; the password is exposed in the webpass parameter of the media_folder.cgi?apply_mode=ping_server URI. The impact is partial confidentiality (per CVSS...