2023

Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi

Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user spa

Memory corruption due to improper access control in Qualcomm IPC.

Memory corruption due to configuration weakness in modem wile sending command to write protected files.

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scatte

Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.

Memory corruption due to use after free in trusted application environment.

Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification r

Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file.

Information disclosure in modem due to buffer over-red while performing checksum of packet received

Denial of service in modem due to missing null check while processing TCP or UDP packets from server

Denial of service in modem due to missing null check while processing IP packets with padding

Denial of service in modem due to null pointer dereference while processing DNS packets

Information disclosure in modem due to buffer over read in dns client due to missing length check

Memory corruption in modem due to improper length check while copying into memory

Information disclosure in modem due to buffer over-read while processing response from DNS server

A vulnerability was found in EcShop 4.1.5. It has been classified as critical. This affects an unknown part of the file

A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function f

A command injection vulnerability in the firmware_update command, in the device's restricted telnet interface, allows an

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulner

Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev.

DataHub is an open-source metadata platform. In versions of DataHub prior to 0.8.45 Session cookies are only cleared on

DataHub is an open-source metadata platform. In the event a system is using Java Authentication and Authorization Servic

DataHub is an open-source metadata platform. The AuthServiceClient which is responsible for creation of new accounts, ve

DataHub is an open-source metadata platform. When not using authentication for the metadata service, which is the defaul

DataHub is an open-source metadata platform. When the DataHub frontend is configured to authenticate via SSO, it will le

DataHub is an open-source metadata platform. The DataHub frontend acts as a proxy able to forward any REST or GraphQL re

Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin u

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin u

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious adm

Wyse Management Suite 3.8 and below contain an improper access control vulnerability with which an custom group admin c

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A malicious admin user can disabl

Wyse Management Suite Repository 3.8 and below contain an information disclosure vulnerability. A unauthenticated attac

Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain a command execu

PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Stored Cross-site Scripting Vulnerabilit

PowerPath Management Appliance with version 3.3 contains Privilege Escalation vulnerability. An authenticated admin use

PowerPath Management Appliance with versions 3.3 & 3.2* contains a Hardcoded Cryptographic Keys vulnerability. Authenti

PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Cross-site Request Forgery vulnerability

PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains OS Command Injection vulnerability. An aut

PowerPath Management Appliance with versions 3.3 & 3.2* contains Authorization Bypass vulnerability. An authenticated r

Dell PowerScale OneFS, versions 8.2.x through 9.3.x contain a weak encoding for a password. A malicious local privilege

Dell PowerScale OneFS, versions 9.2.0.x through 9.4.0.x contain an information vulnerability. A remote unauthenticated

Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module. A loc

SupportAssist for Home PCs (versions 3.11.4 and prior) contain an insufficient session expiration Vulnerability. An aut

Dell SupportAssist contains a rate limit bypass issues in screenmeet API third party component. An unauthenticated atta

Dell SupportAssist for Home PCs (version 3.11.4 and prior) and  SupportAssist for Business PCs (version 3.2.0 and prior

Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and pri

Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior)