VYPR

CVEs

408,147 total · page 5724 of 8,163

AllCriticalHighKEV
  • CVE-2019-2328HigJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Possible buffer overflow when number of channels passed is more than size of channel mapping array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in…

  • CVE-2019-2327CriJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206,…

  • CVE-2019-2326HigJul 25, 2019
    Qualcomm
    MDM9150
    risk 0.51cvss 7.8epss 0.00

    Data token is received from ADSP and is used without validation as an index into the array leads to out of bound access in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…

  • CVE-2019-2322CriJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in…

  • CVE-2019-2316HigJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.57cvss 8.8epss 0.00

    When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9640, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD…

  • CVE-2019-2314HigJul 25, 2019
    Qualcomm
    Snapdragon Compute
    risk 0.46cvss 7.0epss 0.00

    Possible race condition that will cause a use-after-free when writing to two sysfs entries at nearly the same time in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, QCS405,…

  • CVE-2019-2312HigJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    When handling the vendor command there exists a potential buffer overflow due to lack of input validation of data buffer received in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

  • CVE-2019-2309CriJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    While storing calibrated data from firmware in cache, An integer overflow may occur since data length received may exceed real data length. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…

  • CVE-2019-2308HigJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go through to the remote subsystem in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…

  • CVE-2019-2307CriJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.02

    Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice…

  • CVE-2019-2306HigJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in…

  • CVE-2019-2305CriJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Out of bound access when reason code is extracted from frame data without validating the frame length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150,…

  • CVE-2019-2301HigJul 25, 2019
    Qualcomm
    IPQ4019
    risk 0.51cvss 7.8epss 0.00

    Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019,…

  • CVE-2019-2299HigJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

  • CVE-2019-2298HigJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206,…

  • CVE-2019-2293HigJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Pointer dereference while freeing IFE resources due to lack of length check of in port resource. in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435,…

  • CVE-2019-2290HigJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9640,…

  • CVE-2019-2281HigJul 25, 2019
    Qualcomm
    Snapdragon Compute
    risk 0.51cvss 7.8epss 0.00

    An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD…

  • CVE-2019-2278HigJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in MDM9607, MDM9640, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD…

  • CVE-2019-2276CriJul 25, 2019
    Qualcomm
    Snapdragon Consumer IOT
    risk 0.64cvss 9.8epss 0.01

    Possible out of bound read occurs while processing beaconing request due to lack of check on action frames received from user controlled space in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music…

  • CVE-2019-2273HigJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    IOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W,…

  • CVE-2019-2272HigJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Buffer overflow can occur in display function due to lack of validation of header block size set by user. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206,…

  • CVE-2019-2263HigJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Access to freed memory can happen while reading from diag driver due to use after free issue in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking…

  • CVE-2019-2254CriJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206,…

  • CVE-2019-2253CriJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.64cvss 9.8epss 0.01

    Buffer over-read can occur while parsing an ogg file with a corrupted comment block. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150,…

  • CVE-2019-2241MedJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.36cvss 5.5epss 0.00

    While rendering the layout background, Error status check is not caught properly and also incorrect status handling is being done leading to unintended SUI behaviour in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…

  • CVE-2019-2240MedJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.36cvss 5.5epss 0.00

    While sending the rendered surface content to the screen, Error handling is not properly checked results in an unpredictable behaviour in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,…

  • CVE-2019-2239MedJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.36cvss 5.5epss 0.00

    Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

  • CVE-2019-2238HigJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Lack of check of data type can lead to subsequent loop-expression potentially go negative and the condition will still evaluate to true leading to buffer underflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,…

  • CVE-2019-2237MedJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.36cvss 5.5epss 0.00

    Failure in taking appropriate action to handle the error case If keypad gpio deactivation fails leads to silent failure scenario and subsequent logic gets executed everytime in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer…

  • CVE-2019-2236MedJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.36cvss 5.5epss 0.00

    Null pointer dereference during secure application termination using specific application ids. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…

  • CVE-2019-2235HigJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Buffer overflow occurs when emulated RPMB is used due to sector size assumptions in the TA rollback protection logic. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…

  • CVE-2019-14270HigJul 25, 2019
    Comodo
    Internet Security
    risk 0.46cvss 7.1epss 0.00

    Comodo Antivirus through 12.0.0.6870, Comodo Firewall through 12.0.0.6870, and Comodo Internet Security Premium through 12.0.0.6870, with the Comodo Container feature, are vulnerable to Sandbox Escape.

  • CVE-2018-13897HigJul 25, 2019
    Qualcomm
    dnsmasq
    risk 0.49cvss 7.5epss 0.01

    Clients hostname gets added to DNS record on device which is running dnsmasq resulting in an information exposure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206,…

  • CVE-2019-14268MedJul 25, 2019
    Octopus
    Octopusdeploy
    risk 0.42cvss 6.5epss 0.01

    In Octopus Deploy versions 3.0.19 to 2019.7.2, when a web request proxy is configured, an authenticated user (in certain limited circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is fixed in 2019.7.3.…

  • CVE-2019-14266HigJul 25, 2019
    OpenSNS
    OpenSNS
    risk 0.57cvss 8.8epss 0.01

    OpenSNS v6.1.0 allows SQL Injection via the index.php?s=/ucenter/Config/ uid parameter because of the getNeedQueryData function in Application/Common/Model/UserModel.class.php.

  • CVE-2019-4439MedJul 25, 2019
    IBM
    Cloud Private
    risk 0.34cvss 5.3epss 0.00

    IBM Cloud Private 3.1.0, 3.1.1, and 3.1.2 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 162949.

  • CVE-2019-4415HigJul 25, 2019
    IBM
    Cloud Private
    risk 0.51cvss 7.8epss 0.00

    IBM Cloud Private 3.1.1 and 3.1.2 could allow a local user to obtain elevated privileges due to improper security context constraints. IBM X-Force ID: 162706.

  • CVE-2019-4212HigJul 25, 2019
    IBM
    QRadar SIEM
    risk 0.57cvss 8.8epss 0.01

    IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 159132.

  • CVE-2019-4116MedJul 25, 2019
    IBM
    Cloud Private
    risk 0.36cvss 5.5epss 0.00

    IBM Cloud Private 2.1.0, 3.1.0, and 3.1.1 could disclose highly sensitive information in installer logs that could be use for further attacks against the system. IBM X-Force ID: 158115.

  • CVE-2019-3486MedJul 25, 2019
    Microfocus
    ArcSight Security Management Center
    risk 0.30cvss 4.6epss 0.01

    Mitigates a stored cross site scripting issue in ArcSight Security Management Center versions prior to 2.9.1

  • CVE-2019-1010182MedJul 25, 2019
    YAML Rust Project
    YAML Rust
    risk 0.42cvss 6.5epss 0.01

    yaml-rust 0.4.0 and earlier is affected by: Uncontrolled Recursion. The impact is: Denial of service by impossible to catch abort. The component is: YamlLoader::load_from_str function. The attack vector is: Parsing of a malicious YAML document. The fixed version is: 0.4.1 and…

  • CVE-2019-1010176CriJul 25, 2019
    Jerryscript
    Jerryscript
    risk 0.64cvss 9.8epss 0.03

    JerryScript commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 is affected by: Buffer Overflow. The impact is: denial of service and possibly arbitrary code execution. The component is: function lit_char_to_utf8_bytes (jerry-core/lit/lit-char-helpers.c:377). The attack vector is:…

  • CVE-2019-1010174CriJul 25, 2019
    CImg
    Cimg Library
    risk 0.64cvss 9.8epss 0.05

    CImg The CImg Library v.2.3.3 and earlier is affected by: command injection. The impact is: RCE. The component is: load_network() function. The attack vector is: Loading an image from a user-controllable url can lead to command injection, because no string sanitization is done…

  • CVE-2019-1010172HigJul 25, 2019
    Jsish
    Jsish
    risk 0.49cvss 7.5epss 0.01

    Jsish 2.4.84 2.0484 is affected by: Uncontrolled Resource Consumption. The impact is: denial of service. The component is: function jsiValueGetString (jsiUtils.c). The attack vector is: executing crafted javascript code. The fixed version is: after commit…

  • CVE-2019-1010161CriJul 25, 2019
    DCIT
    perl-Crypt-JWT
    risk 0.64cvss 9.8epss 0.01

    perl-CRYPT-JWT 0.022 and earlier is affected by: Incorrect Access Control. The impact is: bypass authentication. The component is: JWT.pm for JWT security token, line 614 in _decode_jws(). The attack vector is: network connectivity(crafting user-controlled input to bypass…

  • CVE-2019-1010183MedJul 25, 2019
    serde
    serde_yaml
    risk 0.42cvss 6.5epss 0.01

    serde serde_yaml 0.6.0 to 0.8.3 is affected by: Uncontrolled Recursion. The impact is: Denial of service by aborting. The component is: from_* functions (all deserialization functions). The attack vector is: Parsing a malicious YAML file. The fixed version is: 0.8.4 and later.

  • CVE-2019-14262HigJul 25, 2019
    Metadataextractor Project
    Metadataextractor
    risk 0.49cvss 7.5epss 0.02

    MetadataExtractor 2.1.0 allows stack consumption.

  • CVE-2019-3622HigJul 24, 2019
    McAfee
    Data Loss Prevention Endpoint
    risk 0.53cvss 8.2epss 0.00

    Files or Directories Accessible to External Parties in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows authenticated user to redirect DLPe log files to arbitrary locations via incorrect access control applied to the DLPe log folder allowing privileged…

  • CVE-2019-3485MedJul 24, 2019
    Microfocus
    ArcSight Logger
    risk 0.30cvss 4.6epss 0.01

    Mitigates a stored cross site scripting issue in ArcSight Logger versions prior to 6.7.1