CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2021-25468

A possible guessing and confirming a byte memory vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows attackers to read arbitrary memory address.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：45 | 回复：0
CVE-2021-25469

A possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows arbitrary code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：28 | 回复：0
CVE-2021-25470

An improper caller check logic of SMC call in TEEGRIS secure OS prior to SMR Oct-2021 Release 1 can be used to compromise TEE.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：32 | 回复：0
CVE-2021-25471

A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：38 | 回复：0
CVE-2021-25472

An improper access control vulnerability in BluetoothSettingsProvider prior to SMR Oct-2021 Release 1 allows untrusted application to overwrite some Bluetooth information.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：21 | 回复：0
CVE-2021-25473

Assuming a shell privilege is gained, an improper exception handling for multi_sim_bar_hide_by_meadia_full value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent den ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：26 | 回复：0
CVE-2021-25474

Assuming a shell privilege is gained, an improper exception handling for multi_sim_bar_show_on_qspanel value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：26 | 回复：0
CVE-2021-25475

A possible heap-based buffer overflow vulnerability in DSP kernel driver prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：34 | 回复：0
CVE-2021-25476

An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows attackers to bypass the ASLR protection mechanism in TEE.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：20 | 回复：0
CVE-2021-25477

An improper error handling in Mediatek RRC Protocol stack prior to SMR Oct-2021 Release 1 allows modem crash and remote denial of service.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：26 | 回复：0
CVE-2021-25478

A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：44 | 回复：0
CVE-2021-25479

A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：33 | 回复：0
CVE-2021-25480

A lack of replay attack protection in GUTI REALLOCATION COMMAND message process in Qualcomm modem prior to SMR Oct-2021 Release 1 can lead to remote denial of service on mobile network connection.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：29 | 回复：0
CVE-2021-25481

An improper error handling in Exynos CP booting driver prior to SMR Oct-2021 Release 1 allows local attackers to bypass a Secure Memory Protector of Exynos CP Memory.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：30 | 回复：0
CVE-2021-25482

SQL injection vulnerabilities in CMFA framework prior to SMR Oct-2021 Release 1 allow untrusted application to overwrite some CMFA framework information.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：24 | 回复：0
CVE-2021-25483

Lack of boundary checking of a buffer in livfivextractor library prior to SMR Oct-2021 Release 1 allows OOB read.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：26 | 回复：0
CVE-2021-25484

Improper authentication in InputManagerService prior to SMR Oct-2021 Release 1 allows monitoring the touch event.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：22 | 回复：0
CVE-2021-25485

Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Oct-2021 Release 1 allows attackers to write file as system UID via BT remote socket.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：41 | 回复：0
CVE-2021-25486

Exposure of information vulnerability in ipcdump prior to SMR Oct-2021 Release 1 allows an attacker detect device information via analyzing packet in log.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：27 | 回复：0
CVE-2021-25487

Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid f ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：24 | 回复：0
CVE-2021-25488

Lack of boundary checking of a buffer in recv_data() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：40 | 回复：0
CVE-2021-25489

Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：41 | 回复：0
CVE-2021-25490

A keyblob downgrade attack in keymaster prior to SMR Oct-2021 Release 1 allows attacker to trigger IV reuse vulnerability with privileged process.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：24 | 回复：0
CVE-2021-25491

A vulnerability in mfc driver prior to SMR Oct-2021 Release 1 allows memory corruption via NULL-pointer dereference.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：27 | 回复：0
CVE-2021-25492

Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：28 | 回复：0
CVE-2021-25493

Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：44 | 回复：0
CVE-2021-25494

A possible buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：26 | 回复：0
CVE-2021-25495

A possible heap buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：34 | 回复：0
CVE-2021-25496

A possible buffer overflow vulnerability in maetd_dec_slice of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：28 | 回复：0
CVE-2021-25497

A possible buffer overflow vulnerability in maetd_cpy_slice of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：26 | 回复：0
CVE-2021-25498

A possible buffer overflow vulnerability in maetd_eco_cb_mode of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：36 | 回复：0
CVE-2021-25499

Intent redirection vulnerability in SamsungAccountSDKSigninActivity of Galaxy Store prior to version 4.5.32.4 allows attacker to access content provider of Galaxy Store.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：21 | 回复：0
CVE-2021-29908

The IBM TS7700 Management Interface is vulnerable to unauthenticated access. By accessing a specially-crafted URL, an attacker may gain administrative access to the Management Interface without authen ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：32 | 回复：0
CVE-2021-38923

IBM PowerVM Hypervisor FW1010 could allow a privileged user to gain access to another VM due to assigning duplicate WWPNs. IBM X-Force ID: 210162.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：28 | 回复：0
CVE-2021-41121

Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when performing a function call inside a literal struct, there is a memory corruption issue that occurs because of an inco ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：20 | 回复：0
CVE-2021-41125

Scrapy is a high-level web crawling and scraping framework for Python. If you use `HttpAuthMiddleware` (i.e. the `http_user` and `http_pass` spider attributes) for HTTP authentication, all requests wi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：44 | 回复：0
CVE-2021-41126

October is a Content Management System (CMS) and web platform built on the the Laravel PHP Framework. In affected versions administrator accounts which had previously been deleted may still be able to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：34 | 回复：0
CVE-2021-41128

Hygeia is an application for collecting and processing personal and case data in connection with communicable diseases. In affected versions all CSV Exports (Statistics BAG MED) contain a CSV Injecti ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：23 | 回复：0
CVE-2021-1534

A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL reputation fi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：31 | 回复：0
CVE-2021-1594

A vulnerability in the REST API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform a command injection attack and elevate privileges to root. This vulne ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:09 | 阅读：31 | 回复：0