VYPR

CVEs

408,769 total · page 5437 of 8,176

AllCriticalHighKEV
  • CVE-2019-14114CriApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Buffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

  • CVE-2019-14113CriApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Buffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during parsing of EAPOL handshake frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon…

  • CVE-2019-14112CriApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired…

  • CVE-2019-14111CriApr 16, 2020
    Qualcomm
    Snapdragon Compute
    risk 0.64cvss 9.8epss 0.01

    Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018,…

  • CVE-2019-14110CriApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than the maximum buffer size in case of SAP mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…

  • CVE-2019-14105HigApr 16, 2020
    Qualcomm
    Snapdragon Mobile
    risk 0.51cvss 7.8epss 0.00

    Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Snapdragon Industrial IOT, Snapdragon Mobile in SDA845, SDM845, SM8150

  • CVE-2019-14104HigApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.46cvss 7.1epss 0.00

    Slab-out-of-bounds access can occur if the context pointer is invalid due to lack of null check on pointer before accessing it in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8053, SC8180X, SDX55, SM8150

  • CVE-2019-14075MedApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.36cvss 5.5epss 0.00

    Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCS605,…

  • CVE-2019-14070HigApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.46cvss 7.0epss 0.00

    Possible use after free issue in pcm volume controls due to race condition exist in private data used in mixer controls in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables,…

  • CVE-2019-14033CriApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach reject/attach accept in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in…

  • CVE-2019-14022HigApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Error occurs While extracting the ipv6_header having an invalid length due to lack of length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8096AU, MDM9205, MDM9206, MDM9607,…

  • CVE-2019-14021HigApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

  • CVE-2019-14020CriApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    Multiple Read overflows issue due to improper length check while decoding dedicated_eps_bearer_req/ act_def_context_req/ cs_serv_notification/ emm_info/ guti_realloc_cmd in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

  • CVE-2019-14019CriApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    Multiple Read overflows issue due to improper length check while decoding RAU accept/PDN disconnect Rej/Modify EPS ctxt req/bearer resource alloc Rej/Deact EPs bearer REq in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…

  • CVE-2019-14018HigApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Possible out of bound array access as there is no check on carrier index passed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607,…

  • CVE-2019-14012HigApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking while processing SDP messages in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

  • CVE-2019-14011CriApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/ esm data transport/ bearer modify context reject in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…

  • CVE-2019-14009HigApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Out of bound memory access while processing TZ command handler due to improper input validation on response length received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…

  • CVE-2019-14007MedApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.36cvss 5.5epss 0.00

    Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

  • CVE-2019-14001HigApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607,…

  • CVE-2019-10625HigApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.46cvss 7.1epss 0.00

    Out of bound access in diag services when DCI command buffer reallocation is not done properly with required capacity in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8096AU,…

  • CVE-2019-10624HigApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    While handling the vendor command there is an integer truncation issue that could yield a buffer overflow due to int data type copied to u8 data type in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon…

  • CVE-2019-10623HigApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.46cvss 7.1epss 0.00

    Possible integer overflow can happen in host driver while processing user controlled string due to improper validation on data received. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

  • CVE-2019-10622CriApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

  • CVE-2019-10621HigApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Use after free issue when MAP and UNMAP calls at same time as data structure used my MAP may be freed by UNMAP function in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in Nicobar, QCS405, Rennell, Saipan, SC8180X,…

  • CVE-2019-10620HigApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Kernel memory error in debug module due to improper check of user data length before copying into memory in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8096AU, APQ8098, MSM8996AU,…

  • CVE-2019-10610CriApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,…

  • CVE-2019-10609CriApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Out of bound write can happen due to lack of check of array index value while calculating it. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009,…

  • CVE-2019-10608MedApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.36cvss 5.5epss 0.00

    Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display session that allows user to take control of the REE to stop the secure keypad session and read the keypad input. in Snapdragon Auto, Snapdragon Compute, Snapdragon…

  • CVE-2019-10589CriApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

  • CVE-2019-10588CriApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice…

  • CVE-2019-10575HigApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Wlan binary which is not signed with OEMs RoT is working on secure device without authentication failure in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in SDA845, SDM845, SDM850

  • CVE-2019-10574HigApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.46cvss 7.1epss 0.02

    Lack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…

  • CVE-2019-10556HigApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some cases in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…

  • CVE-2019-10551CriApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    String error while processing non standard SIP messages received can lead to buffer overread and then denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,…

  • CVE-2019-10547HigApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    When issuing IOCTL calls to ION, Memory leak can occur due to failure in unassign pages under certain conditions in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…

  • CVE-2019-10523MedApr 16, 2020
    Qualcomm
    Snapdragon
    risk 0.36cvss 5.5epss 0.00

    Target specific data is being sent to remote server and leads to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, MSM8909W,…

  • CVE-2019-10483MedApr 16, 2020
    Qualcomm
    QTEE
    risk 0.36cvss 5.5epss 0.00

    Side channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp or strcmp in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

  • CVE-2020-9280HigApr 15, 2020
    Silverstripe
    Silverstripe
    risk 0.42cvss 7.5epss 0.02

    In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads" folder instead. This affects installations which allowed upload folder protection via the optional silverstripe/secureassets module under 3.x.…

  • CVE-2020-5721MedApr 15, 2020
    Mikrotik
    Winbox
    risk 0.36cvss 5.5epss 0.00

    MikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw configuration file when the Keep Password field is set and no Master Password is set. Keep Password is set by default and, by default Master Password is not set. An attacker with access…

  • CVE-2020-3273HigApr 15, 2020
    Cisco Systems, Inc.
    5508 Wireless Controller Firmware
    risk 0.49cvss 7.5epss 0.01

    A vulnerability in the 802.11 Generic Advertisement Service (GAS) frame processing function of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS). The…

  • CVE-2020-3262HigApr 15, 2020
    Cisco Systems, Inc.
    5508 Wireless Controller Firmware
    risk 0.49cvss 7.5epss 0.01

    A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol handler of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The…

  • CVE-2020-3261MedApr 15, 2020
    Cisco Systems, Inc.
    Mobility Express Software
    risk 0.42cvss 6.5epss 0.01

    A vulnerability in the web-based management interface of Cisco Mobility Express Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the…

  • CVE-2020-3260MedApr 15, 2020
    Cisco Systems, Inc.
    Aironet 1542d Firmware
    risk 0.42cvss 6.5epss 0.00

    A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper processing of client packets that are sent to an affected…

  • CVE-2020-3252MedApr 15, 2020
    Cisco Systems, Inc.
    Ucs Director
    risk 0.43cvss 6.5epss 0.05

    Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the…

  • CVE-2020-3251HigApr 15, 2020
    Cisco Systems, Inc.
    Ucs Director
    risk 0.62cvss 8.8epss 0.62

    Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the…

  • CVE-2020-3250CriApr 15, 2020
    Cisco Systems, Inc.
    Ucs Director
    risk 0.72cvss 9.8epss 0.61

    Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the…

  • CVE-2020-3249HigApr 15, 2020
    Cisco Systems, Inc.
    Ucs Director
    risk 0.51cvss 7.5epss 0.24

    Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the…

  • CVE-2020-3248CriApr 15, 2020
    Cisco Systems, Inc.
    Ucs Director
    risk 0.70cvss 9.8epss 0.74

    Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the…

  • CVE-2020-3247CriApr 15, 2020
    Cisco Systems, Inc.
    Ucs Director
    risk 0.70cvss 9.8epss 0.76

    Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the…