2021

Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in Snapdragon

Denial of service in WLAN module due to improper check of subtypes in logic where excessive frames are dropped in Snapdr

Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Com

Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to informati

An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard

A buffer overflow can occur when playing an MKV clip due to lack of input validation in Snapdragon Auto, Snapdragon Comp

Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the

Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to informati

Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parame

Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Com

Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during a

Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper

Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beaco

Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a sta

Possible out of bounds while accessing global control elements due to race condition in Snapdragon Auto, Snapdragon Comp

Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status i

Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snap

Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute,

Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon

Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary complian

Stack overflow may occur if GSM/WCDMA broadcast config size received from user is larger than variable length array in S

Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improp

Out of bound write and read in TA while processing command from NS side due to improper length check on command and resp

Possible out of bound access in TA while processing a command from NS side due to improper length check of response buff

Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Co

User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and

Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header ex

Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters

Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage of

Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope.

An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. There is cross-site scripting (XSS) in

An issue was discovered in MantisBT through 2.24.3. In the helper_ensure_confirmed call in manage_custom_field_update.ph

An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. Because the local notification service

On Netshield NANO 25 10.2.18 devices, /usr/local/webmin/System/manual_ping.cgi allows OS command injection (after authen

Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring.

Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode.

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, ba

URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relati

url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.

EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-f

The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files becau

Modules/input/Views/schedule.php in Emoncms through 10.2.7 allows XSS via the node parameter.

Livy server version 0.7.0-incubating (only) is vulnerable to a cross site scripting issue in the session name. A malicio

An integer overflow in the PngImg::InitStorage_() function of png-img before 3.1.0 leads to an under-allocation of heap

The slashify package 1.0.0 for Node.js allows open-redirect attacks, as demonstrated by a localhost:3000///example.com/

In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access c

An issue was discovered in SmartStoreNET before 4.1.0. Lack of Cross Site Request Forgery (CSRF) protection may lead to

Mailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in lib/models/campaigns.js via /campaig

TweetStream 2.6.1 uses the library eventmachine in an insecure way that does not have TLS hostname validation. This allo

In voloko twitter-stream 0.1.10, missing TLS hostname validation allows an attacker to perform a man-in-the-middle attac