2021

Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdrago

Use after free condition in msm ioctl events due to race between the ioctl register and deregister events in Snapdragon

Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes

Part of RPM region was not protected from xblSec itself due to improper policy and leads to unprivileged access in Snapd

Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer i

Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapd

Buffer over read while processing MT SMS with maximum length due to improper length check in Snapdragon Auto, Snapdragon

Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due

While processing storage SCM commands there is a time of check or time of use window where a pointer used could be inval

Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Au

HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information e

Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Comp

Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon

Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon

Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon

Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of inpu

Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon

Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC

The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/secu

A privilege escalation flaw was found in OpenShift builder. During build time, credentials outside the build context are

It has been discovered in redhat-certification that any unauthorized user may download any file under /var/www/rhcert, p

A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container

NATS Server 2.x before 2.2.0 and JWT library before 2.0.1 have Incorrect Access Control because Import Token bindings ar

The vhs (aka VHS: Fluid ViewHelpers) extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper.

The aimeos (aka Aimeos shop and e-commerce framework) extension before 19.10.12 and 20.x before 20.10.5 for TYPO3 allows

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php,

Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php,

The Web CGI Script on ZyXEL LTE4506-M606 V1.00(ABDO.2)C0 devices does not require authentication, which allows remote un

A vulnerability has been identified in the Silverstripe CMS 3 and 4 version of the symbiote/silverstripe-queuedjobs modu

Prototype pollution vulnerability in 'patchmerge' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of s

A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to

Varnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service (daemon restart) in some conf

Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap cor

Heap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially explo

Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap co

Portainer 1.24.1 and earlier is affected by incorrect access control that may lead to remote arbitrary code execution. T

Portainer 1.24.1 and earlier is affected by an insecure permissions vulnerability that may lead to remote arbitrary code

IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 uses an inadequate account lockout setting that could

IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user with a valid role to the RES

IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poison log files which co

Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing

ExpressionEngine before 5.4.2 and 6.x before 6.0.3 allows PHP Code Injection by certain authenticated users who can leve

If certificates that signed grub are installed into db, grub can be booted directly. It will then boot any kernel withou

Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions prior to 1.3.2 are s

A packet of death scenario is possible in mvfst via a specially crafted message during a QUIC session, which causes a cr

The web service responsible for fetching other users' enrolled courses did not validate that the requesting user had per

When creating a user account, it was possible to verify the account without having access to the verification email link

It was possible for some users without permission to view other users' full names to do so via the online users block in

Text-based feedback answers required additional sanitizing to prevent stored XSS and blind SSRF risks in moodle before 3

The ID number user profile field required additional sanitizing to prevent a stored XSS risk in moodle before 3.10.2, 3.