CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8076 firmware +52 more +54 moreMultiple Read overflows issue due to improper length check while decoding...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +54 more +56 moreMultiple Read overflows issue due to improper length check while decoding RAU accept/PDN...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096 firmware +49 more +51 morePossible out of bound array access as there is no check on carrier index passed in Snapdragon...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm msm8905 firmware, msm8909 firmware +22 more +24 morePossibility of null pointer deference as the array of video codecs from media info is referenced...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +52 more +54 moreMultiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8098 firmware +14 more +16 moreOut of bound memory access while processing TZ command handler due to improper input validation...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +47 more +49 moreDue to the use of non-time-constant comparison functions there is issue in timing side channels...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +21 more +23 moreWrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto,...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8096au firmware +13 more +15 moreOut of bound access in diag services when DCI command buffer reallocation is not done properly...7.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8096au firmware, msm8996au firmware +10 more +12 moreWhile handling the vendor command there is an integer truncation issue that could yield a buffer...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm qcn7605 firmware, qcs605 firmware +10 more +12 morePossible integer overflow can happen in host driver while processing user controlled string due...7.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +18 more +20 moreOut of bound memory access can happen while parsing ADSP message due to lack of check of size of...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm nicobar firmware, qcs405 firmware +9 more +11 moreUse after free issue when MAP and UNMAP calls at same time as data structure used my MAP may be...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8096au firmware, apq8098 firmware +5 more +7 moreKernel memory error in debug module due to improper check of user data length before copying into...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 morePossible buffer over read when trying to process SDP message Video media line with frame-size...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreOut of bound write can happen due to lack of check of array index value while calculating it. in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, msm8905 firmware +1 more +3 moreInformation disclosure issue occurs as there is no binding between the secure keypad session and...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8017 firmware, apq8053 firmware +18 more +20 moreLack of length check of response buffer can lead to buffer over-flow while GP command response...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 moreCopying RTCP messages into the output buffer without checking the destination buffer size which...9.8 Critical
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm sda845 firmware, sdm845 firmware +1 more +3 moreWlan binary which is not signed with OEMs RoT is working on secure device without authentication...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8016 firmware +49 more +51 moreLack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in...7.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +29 more +31 moreMissing length check before copying the data from kernel space to userspace through the copy...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 moreString error while processing non standard SIP messages received can lead to buffer overread and...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +30 more +32 moreWhen issuing IOCTL calls to ION, Memory leak can occur due to failure in unassign pages under...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +21 more +23 moreTarget specific data is being sent to remote server and leads to information exposure in...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8016 firmware +50 more +52 moreSide channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp...5.5 Medium
- canonical pulseaudio, ubuntu linux +1 moreUbuntu modifications to pulseaudio to provide snap security enforcement could be unloaded3.3 Low
- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +2 more +4 moreA use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted...8.8 High
- schneider-electric tricon tcm 4351 firmware, tricon tcm 4351a firmware, tricon tcm 4351b firmware +3 more +5 more**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause TCM modules to reset when...7.5 High
- schneider-electric tristation 1131**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software...9.8 Critical
- schneider-electric tristation 1131**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability with the former 'password' feature could...7.5 High
- schneider-electric tristation 1131**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause certain data to be visible on...7.5 High
- mikrotik winboxMikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw...5.5 Medium
- broadcom ca api developer portal, ca technologies api developer portal +1 moreCA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged...6.5 Medium
- broadcom ca api developer portal, ca technologies api developer portal +1 moreCA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged...4.3 Medium
- broadcom ca api developer portal, ca technologies api developer portal +1 moreCA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which...9.8 Critical
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate.8.6 High
- silverstripeSilverStripe Folders migrated from 3.x may be unsafe to upload to7.5 High
- cisco wireless lan controller (wlc), 5508 wireless controller firmware, 5520 wireless controller firmware +2 moreCisco Wireless LAN Controller 802.11 Generic Advertisement Service Denial of Service Vulnerability8.6 High
- cisco 5508 wireless controller firmware, 5520 wireless controller firmware, aironet access point software +2 moreCisco Wireless LAN Controller CAPWAP Denial of Service Vulnerability8.6 High
- cisco mobility express, 6300 series access points firmware, aironet 1542d firmware +15 more +17 moreCisco Mobility Express Software Cross-Site Request Forgery Vulnerability8.1 High
- cisco aironet 1542d firmware, aironet 1542i firmware, aironet 1815 firmware +4 more +6 moreCisco Aironet Series Access Points Client Packet Processing Denial of Service Vulnerability7.4 High
- cisco ucs director, ucs director express for big data +1 moreMultiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data9.8 Critical
- cisco ucs director, ucs director express for big data +1 moreMultiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data9.8 Critical
- cisco ucs director, ucs director express for big data +1 moreMultiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data9.8 Critical
- cisco ucs director, ucs director express for big data +1 moreMultiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data9.8 Critical
- cisco ucs director, ucs director express for big data +1 moreMultiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data9.8 Critical
- cisco ucs director, ucs director express for big data +1 moreMultiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data9.8 Critical
- cisco ucs director, ucs director express for big data +1 moreMultiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data9.8 Critical
- cisco ucs director, ucs director express for big data +1 moreMultiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data9.8 Critical
- Show moreLoading…