2021

SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22

SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC -

SAP NetWeaver AS for ABAP (Web Survey), versions - 700, 702, 710, 711, 730, 731, 750, 750, 752, 75A, 75F, does not suffi

SAP NetWeaver AS ABAP and ABAP Platform, versions - 700, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, con

Due to improper input sanitization, specially crafted LDAP queries can be injected by an unauthenticated user. This coul

Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are

portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensiti

Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an

SGE-PLC1000 device, in its 0.9.2b firmware version, does not handle some requests correctly, allowing a remote attacker

A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1

Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities rel

Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities rela

The Refined GitHub browser extension before 21.6.8 might allow XSS via a link in a document. NOTE: github.com sends Cont

Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet

Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdrag

Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdrag

Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdrago

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memo

Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon A

Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due

Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value

While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause

Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdrag

Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrast

A race between command submission and destroying the context can cause an invalid context being added to the list leads

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size

An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Sn

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastruct

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastruct

Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastruct

Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infras

Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute,

Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attri

Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is alloc

Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned

Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdrago

Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto

Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again f

Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon

Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with

Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the l

Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external compon

Resource leakage issue during dci client registration due to reference count is not decremented if dci client registrati

Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length o

Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like

Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto,

For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doub

The ATOM (ATOM - Smart life App for Android versions prior to 1.8.1 and ATOM - Smart life App for iOS versions prior to

WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbit

Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and