CVEs published in October 2021
2,217 vulnerabilities, 187 critical, 16 exploited.
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +89 more +91 morePossible memory corruption due to lack of validation of client data used for memory allocation in...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +88 more +90 morePossible memory corruption due to lack of validation of client data used for memory allocation in...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +194 more +196 morePossible stack overflow due to improper length check of TLV while copying the TLV to a local...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +95 more +97 morePossible buffer overflow due to improper size calculation of payload received in VR service in...8.4 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, qualcomm apq8017 firmware, apq8053 firmware +75 more +77 morePossible out of bound read or write in VR service due to lack of validation of DSP selection...8.4 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, qualcomm apq8017 firmware, apq8053 firmware +75 more +77 morePossible stack overflow due to improper validation of camera name length before copying the name...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +93 more +95 morePossible buffer over read due to lack of data length check in QVR Service configuration in...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +93 more +95 morePossible buffer overflow due to improper validation of index value while processing the plugin...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +93 more +95 morePossible buffer overflow due to improper handling of negative data length while processing write...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +186 more +188 morePossible memory corruption due to lack of bound check of input index in Snapdragon Auto,...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +137 more +139 morePossible integer overflow due to improper check of batch count value while sanitizer is enabled...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +120 more +122 moreNull pointer dereference can occur due to lack of null check for user provided input in...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +62 more +64 moreImproper access control in trusted application environment can cause unauthorized access to CDSP...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +82 more +84 moreNull pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto,...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +79 more +81 morePossible integer overflow due to improper length check while updating grace period and count...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +89 more +91 moreAccepting AMSDU frames with mismatched destination and source address can lead to information...8.6 High
uwsgiDebianuwsgi - regression updateNo scoresmarty3Debiansmarty3 - regression updateNo score- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreThe firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to...6.7 Medium
- oracle database server, oracle corporation database - enterprise edition +1 moreVulnerability in the Oracle Database Enterprise Edition Unified Audit component of Oracle...2.7 Low
- zephyrproject zephyrTruncated L2CAP K-frame causes assertion failure4.3 Medium
- zephyrproject zephyrDisconnecting L2CAP channel right after invalid ATT request leads freeze4.3 Medium
- amazon toughImproper sanitization of delegated role names in tough8.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web: A path traversal vulnerability allows an authenticated attacker to elevate their privileges to root8.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Under a specific device configuration an attacker can access the devices J-Web management services from any interface, regardless of security settings protecting the service7.2 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In Point to MultiPoint (P2MP) scenarios receipt of various crafted packets causes RPD to core.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX1000 System, PTX10002-60C System: After upgrading, configured firewall filters may be applied on incorrect interfaces6.5 Medium
- juniper networks src series, juniper session and resource control +1 moreSRC Series: A remote attacker sending a specially crafted query may cause the web server to delete files6.5 Medium
- juniper networks src series, juniper session and resource control +1 moreSRC Series: A remote attacker sending a specially crafted query may cause the web server to disclose sensitive information5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: MPC 7/8/9/10/11 cards with MAP-E: PFE halts when an attacker sends malformed IPv4 or IPv6 traffic inside the MAP-E tunnel.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: An attacker sending spoofed RADIUS messages to a Junos OS device configured for broadband services may cause broadband subscribers to remain stuck in a "Terminating" state.6.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: A local authenticated attacker can cause RPD to core5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX Series: Packet Forwarding Engine manager (FXPC) process crashes when processing DHCPv6 packets7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed7.2 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Persistent XSS vulnerability in J-Web8.0 High
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.8.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces.5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and EX4600 Series: Control traffic might be dropped if a high rate of specific multicast traffic is received6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Traffic drops will be observed if MS-MPC/MS-PIC resources are consumed by certain traffic causing a partial DoS5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300 Series, EX3400 Series, and ACX710 might become unresponsive if the out-of-band management port receives a flood of traffic7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series: An FPC heap memory leak will be triggered by certain Flowspec route operations which can lead to an FPC crash6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In subscriber management / BBE configuration authd can crash if a subscriber with a specific username tries to login leading to a DoS6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300, EX3400 and EX4300 Series: An Aggregated Ethernet (AE) interface will go down due to a stream of specific layer 2 frames6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is received5.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of a specific LDP message will cause a Denial of Service6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An IS-IS adjacency might be taken down if a bad hello PDU is received for an existing adjacency causing a DoS6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX Series and PTX Series: FPC resource usage increases when certain packets are processed which are being VXLAN encapsulated5.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Denial of Service vulnerability in local file processing7.1 High
- Show moreLoading…