2021

Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto

Denial of service in SAP case due to improper handling of connections when association is rejected in Snapdragon Auto, S

Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto

Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 fr

Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapd

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon

Use after free can occur due to improper handling of response from firmware in Snapdragon Auto, Snapdragon Compute, Snap

Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Comp

Possible buffer overflow due to improper validation of buffer length while processing fast boot commands in Snapdragon A

Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Co

Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon

Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon

Possible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon Consumer IOT, Snapdrag

Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer

Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Comput

Improper length check of public exponent in RSA import key function could cause memory corruption. in Snapdragon Auto, S

Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snap

Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto,

An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon W

Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon A

Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute

FlowDroid is a data flow analysis tool. FlowDroid versions prior to 2.9.0 contained an XML external entity (XXE) vulnera

Icinga Web 2 is an open source monitoring web interface, framework, and command-line interface. A vulnerability in which

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Between versions 2.3.0 an

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, the

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, the

Nextcloud Text is a collaborative document editing application that uses Markdown. A cross-site scripting vulnerability

Nextcloud Android Client is the Android client for Nextcloud. Clients using the Nextcloud end-to-end encryption feature

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, web

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, def

In the YOP Poll WordPress plugin before 6.2.8, when a pool is created with the options "Allow other answers", "Display o

The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the

The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the

The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new shee

The Browser Screenshots WordPress plugin before 1.7.6 allowed authenticated users with a role as low as Contributor to p

The Glass WordPress plugin through 1.3.2 does not sanitise or escape its "Glass Pages" setting before outputting in a pa

The Salon booking system WordPress plugin before 6.3.1 does not properly sanitise and escape the First Name field when b

The W3 Total Cache WordPress plugin before 2.1.3 did not sanitise or escape some of its CDN settings, allowing high priv

The Backup by 10Web – Backup and Restore Plugin WordPress plugin through 1.0.20 does not sanitise or escape the tab para

The WP Reset – Most Advanced WordPress Reset Tool WordPress plugin before 1.90 did not sanitise or escape its extra_data

The WP JobSearch WordPress plugin before 1.7.4 did not sanitise or escape multiple of its parameters from the my-resume

The Request a Quote WordPress plugin before 2.3.4 did not sanitise and escape some of its quote fields when adding/editi

The WP YouTube Lyte WordPress plugin before 1.7.16 did not sanitise or escape its lyte_yt_api_key and lyte_notification

The Smooth Scroll Page Up/Down Buttons WordPress plugin through 1.4 does not properly sanitise and validate its psb_posi

The Prismatic WordPress plugin before 2.8 does not escape the 'tab' GET parameter before outputting it back in an attrib

The Prismatic WordPress plugin before 2.8 does not sanitise or validate some of its shortcode parameters, allowing users

The Filebird Plugin 4.7.3 introduced a SQL injection vulnerability as it is making SQL queries without escaping user inp

The Admin Columns WordPress plugin Free before 4.3.2 and Pro before 5.5.2 allowed to configure individual columns for ta

A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows authenticated attackers to e

SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the componen