Latest CVE Feed
-
5.5
MEDIUMCVE-2021-36535
Buffer Overflow vulnerability in Cesanta mJS 1.26 allows remote attackers to cause a denial of service via crafted .js file to mjs_set_errorf.... Read more
Affected Products : mjs- Published: Feb. 03, 2023
- Modified: Mar. 26, 2025
-
5.5
MEDIUMCVE-2020-3674
Information can leak into userspace due to improper transfer of data from kernel to userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in ... Read more
Affected Products : sdx55_firmware sm8150_firmware sm8250_firmware sxr2130_firmware qcs405_firmware sc8180x_firmware nicobar_firmware saipan_firmware qcs405 sdx55 +6 more products- Published: Sep. 09, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2017-15844
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the function for writing device values into flash, uninitialized memory can be written to flash.... Read more
Affected Products : android- Published: Sep. 18, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-38674
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.... Read more
- Published: Feb. 12, 2023
- Modified: Mar. 26, 2025
-
5.5
MEDIUMCVE-2022-44447
In wlan driver, there is a possible null pointer dereference issue due to a missing bounds check. This could lead to local denial of service in wlan services.... Read more
- Published: Feb. 12, 2023
- Modified: Mar. 26, 2025
-
5.5
MEDIUMCVE-2022-47344
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.... Read more
- Published: Feb. 12, 2023
- Modified: Mar. 26, 2025
-
5.5
MEDIUMCVE-2023-24565
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds read past the end of an allocated ... Read more
- Published: Feb. 14, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-41614
Insufficiently protected credentials in the Intel(R) ON Event Series Android application before version 2.0 may allow an authenticated user to potentially enable information disclosure via local access.... Read more
Affected Products : on_event_series- Published: Feb. 16, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-9493
In the content provider of the download manager, there is a possible SQL injection due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploit... Read more
Affected Products : android- Published: Oct. 02, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-37935
HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.... Read more
Affected Products : oneview_for_vmware_vcenter- Published: Mar. 01, 2023
- Modified: Mar. 12, 2025
-
5.5
MEDIUMCVE-2018-0457
A vulnerability in the Cisco Webex Player for Webex Recording Format (WRF) files could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. An attacker could exploit this vulnerability by sending a user a link or email a... Read more
Affected Products : webex_meetings_online- Published: Oct. 05, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-1189
A vulnerability was found in WiseCleaner Wise Folder Hider 4.4.3.202. It has been declared as problematic. Affected by this vulnerability is the function 0x222400/0x222404/0x222410 in the library WiseFs64.sys of the component IoControlCode Handler. The ma... Read more
Affected Products : wise_folder_hider- Published: Mar. 06, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2017-20181
A vulnerability classified as critical was found in hgzojer Vocable Trainer up to 1.3.0 on Android. This vulnerability affects unknown code of the file src/at/hgz/vocabletrainer/VocableTrainerProvider.java. The manipulation leads to path traversal. Attack... Read more
Affected Products : vocable_trainer- Published: Mar. 07, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-47453
In wcn service, there is a possible missing params check. This could lead to local denial of service in wcn service.... Read more
- Published: Mar. 10, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-47460
In gpu device, there is a memory corruption due to a use after free. This could lead to local denial of service in kernel.... Read more
- Published: Mar. 10, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-47475
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.... Read more
- Published: Mar. 10, 2023
- Modified: Mar. 06, 2025
-
5.5
MEDIUMCVE-2022-47478
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.... Read more
- Published: Mar. 10, 2023
- Modified: Mar. 06, 2025
-
5.5
MEDIUMCVE-2023-24578
McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading. This could enable a user with lower privileges to execute unauthorized tasks.... Read more
Affected Products : total_protection- Published: Mar. 13, 2023
- Modified: Feb. 27, 2025
-
5.5
MEDIUMCVE-2017-14410
A buffer over-read was discovered in III_i_stereo in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an application crash, which leads to remote denial of service.... Read more
Affected Products : mp3gain- Published: Sep. 13, 2017
- Modified: Apr. 20, 2025