WESEEK, Inc. Security Vulnerabilities

CVE-2023-52648

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Unmap the surface before resetting it on a plane state Switch to a new plane state requires unreferencing of all held surfaces. In the work required for mob cursors the mapped surfaces started being cached but the...

CVE-2023-52648

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Unmap the surface before resetting it on a plane state Switch to a new plane state requires unreferencing of all held surfaces. In the work required for mob cursors the mapped surfaces started being cached but the...

CVE-2023-41291

A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version:...

CVE-2023-52648

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Unmap the surface before resetting it on a plane state Switch to a new plane state requires unreferencing of all held surfaces. In the work required for mob cursors the mapped surfaces started being cached but the...

School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting

School Dormitory Management System 1.0 contains an authenticated cross-site scripting vulnerability in admin/inc/navigation.php:126. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based....

CVE-2023-33055

Memory Corruption in Audio while invoking callback function in driver from...

CVE-2023-33020

Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA...

CVE-2023-33016

Transient DOS in WLAN firmware while parsing MLO (multi-link...

CVE-2023-28574

Memory corruption in core services when Diag handler receives a command to configure event...

CVE-2023-28569

Information disclosure in WLAN HAL while handling command through WMI...

CVE-2023-28568

Information disclosure in WLAN HAL when reception status handler is...

CVE-2023-28563

Information disclosure in IOE Firmware while handling WMI...

CVE-2023-28549

Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV...

CVE-2023-28548

Memory corruption in WLAN HAL while processing Tx/Rx commands from...

CVE-2023-24854

Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response...

CVE-2023-24850

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted...

CVE-2023-24844

Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address...

CVE-2023-22666

Memory Corruption in Audio while playing amrwbplus clips with modified...

CVE-2023-22386

Memory Corruption in WLAN HOST while processing WLAN FW request to allocate...

CVE-2023-22384

Memory Corruption in VR Service while sending data using Fast Message Queue...

CVE-2023-21669

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source...

CVE-2023-21663

Memory Corruption while accessing metadata in...

CVE-2023-21665

Memory corruption in Graphics while importing a...

CVE-2023-21654

Memory corruption in Audio during playback session with audio effects...

CVE-2023-21658

Transient DOS in WLAN Firmware while processing the received beacon or probe response...

CVE-2023-21649

Memory corruption in WLAN while running doDriverCmd for an unspecific...

CVE-2023-21632

Memory corruption in Automotive GPU while querying a gsl memory...

CVE-2022-40538

Transient DOS due to reachable assertion in modem while processing sib with incorrect values from...

CVE-2022-40536

Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from...

CVE-2022-40537

Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP...

CVE-2022-40534

Memory corruption due to improper validation of array index in...

CVE-2022-40532

Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to...

CVE-2022-40529

Memory corruption due to improper access control in kernel while processing a mapping request from root...

CVE-2022-40530

Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization...

CVE-2022-40525

Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel...

CVE-2022-40523

Information disclosure in Kernel due to indirect branch...

CVE-2022-40515

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata...

CVE-2022-40512

Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or...

CVE-2022-33295

Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its...

CVE-2022-33287

Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6...

CVE-2022-33279

Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame...

CVE-2022-33272

Transient DOS in modem due to reachable...

CVE-2022-33269

Memory corruption due to integer overflow or wraparound in Core while DDR memory...

CVE-2022-33257

Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust...

CVE-2022-33256

Memory corruption due to improper validation of array index in Multi-mode call...

CVE-2022-33246

Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session...

CVE-2022-33244

Transient DOS due to reachable assertion in modem during MIB reception and SIB...

CVE-2022-33240

Memory corruption in Audio due to incorrect type cast during audio...

CVE-2022-33225

Memory corruption due to use after free in trusted application...

CVE-2022-33216

Transient Denial-of-service in Automotive due to improper input validation while parsing ELF...