501 matches found
Vulnerability of the start_TA_task function (with a shift of 0x137F7C) in the TEE OS Trusted Core component of the operating system’s SMC handler. This vulnerability allows a malicious actor to trigger a service failure in the Huawei Mate 9 Pro mobile phone’s microprogramming system.
The vulnerability of the startTAtask function with a offset of 0x137F7C in the SMC handler of the operating system TEE OS Trusted Core in the microprogramming environment of the Huawei Mate 9 Pro mobile phone is related to the assignment of an untrusted pointer. Exploiting this vulnerability can...
CVE-2019-11577
dhcpcd before 7.2.1 contains a buffer overflow in dhcp6findna in dhcp6.c when reading NA/TA addresses...
CVE-2019-11577
dhcpcd before 7.2.1 contains a buffer overflow in dhcp6findna in dhcp6.c when reading NA/TA addresses...
CVE-2019-11577
dhcpcd before 7.2.1 contains a buffer overflow in dhcp6findna in dhcp6.c when reading NA/TA addresses...
CVE-2019-11577
dhcpcd before 7.2.1 contains a buffer overflow in dhcp6findna in dhcp6.c when reading NA/TA addresses...
CVE-2019-11577
CVE-2019-11577 affects dhcpcd prior to 7.2.1, with a buffer overflow in dhcp6_findna (dhcp6.c) when reading NA/TA addresses. The context in connected sources confirms the vulnerability condition and that exposure arises from the relevant code path; no explicit exploitation or patch details are pr...
CVE-2019-11577: Improper Restriction of Operations within the Bounds of a Memory Buffer
dhcpcd before 7.2.1 contains a buffer overflow in dhcp6findna in dhcp6.c when reading NA/TA addresses...
PT-2019-9471
Name of the Vulnerable Software and Affected Versions Miek Gieben DNS library versions prior to 1.0.10 Description The issue is related to a parsing error in the dns.ParseZone function, which can cause a segmentation violation or a panic due to a nil pointer dereference when parsing a malformed...
CVE-2018-11847
Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon...
CVE-2018-11847
CVE-2018-11847: A vulnerability where a malicious TA can tag QSEE kernel memory and map it into EL0, enabling corruption of physical memory and the QSEE kernel, effectively compromising the entire TEE. Affected platforms include Snapdragon Auto, Compute, Connectivity, Consumer Electronics Connect...
CVE-2018-11888
CVE-2018-11888 targets Qualcomm Snapdragon platforms, where the SCP11 Crypto Services Trust Application can be commanded by other TAs. Affects numerous Snapdragon SoCs (e.g., SD 210/212/205 through SD 835, 820/820A, 650/52, 625, 615/16, and others) across MDM9607/9650/9655, MSM8996AU, and related...
PT-2019-8814
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions MDM9607, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SD 835, SD 8CX, SDM439,...
CVE-2018-11888: Missing Authorization
Unauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from other TA in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and...
SQL Injection Vulnerability in emlog v5.3.1 Backend ta***.php Page
Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. emlog v5.3.1 SQL injection vulnerability exists in the backend ta.php page, which can be exploited by attackers to obtain sensitive database information...
CVE-2018-11847
Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon...
CVE-2018-16987
Squash TM through 1.18.0 presents the cleartext passwords of external services in the administration panel, as demonstrated by a ta-server-password field in the HTML source code...
PT-2018-13819
Name of the Vulnerable Software and Affected Versions Squash TM versions prior to 1.18.0 Description The issue presents cleartext passwords of external services in the administration panel. This is demonstrated by the presence of a ta-server-password field in the HTML source code. Recommendations...
CVE-2018-16987: Insufficiently Protected Credentials
Squash TM through 1.18.0 presents the cleartext passwords of external services in the administration panel, as demonstrated by a ta-server-password field in the HTML source code...
SQL injection vulnerability in DedeCMS V5.7-SP2 ta***.php page
Weaving dream content management system DedeCms is a PHP open source website management system. A SQL injection vulnerability exists in the DedeCMS V5.7-SP2 ta.php page. An attacker can exploit the vulnerability to obtain sensitive database information...