Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-30213 State: PUBLISHED Published: 2021-05-12T16:19:27 Last Updated: 2024-08-03T22:24:59.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting (XSS). An attacker can inject arbitrary web script in '/servlet/AdapterHTTP' via the 'targetService' parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/XSS-KnowageSuite7-3_unauth.md
CVE ID: CVE-2021-30214 State: PUBLISHED Published: 2021-05-12T16:18:03 Last Updated: 2024-08-03T22:24:59.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/CSTI-KnowageSuite7-3.md
CVE ID: CVE-2021-30216 State: REJECTED Published: 2021-11-16T12:16:18 Last Updated: 2021-11-17T05:37:53 Description: No description available.
CVE ID: CVE-2021-30218 State: PUBLISHED Published: 2021-04-29T14:29:19 Last Updated: 2024-08-03T22:24:59.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: samurai 1.2 has a NULL pointer dereference in writefile() in util.c via a crafted build file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/michaelforney/samurai/issues/67 - https://github.com/michaelforney/samurai/commit/e84b6d99c85043fa1ba54851ee500540ec206918
CVE ID: CVE-2021-30219 State: PUBLISHED Published: 2021-04-29T14:29:19 Last Updated: 2024-08-03T22:24:59.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: samurai 1.2 has a NULL pointer dereference in printstatus() function in build.c via a crafted build file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/michaelforney/samurai/issues/68 - https://github.com/michaelforney/samurai/commit/d2af3bc375e2a77139c3a28d6128c60cd8d08655
CVE ID: CVE-2021-30224 State: PUBLISHED Published: 2021-04-29T14:57:14 Last Updated: 2024-08-03T22:24:59.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) in Rukovoditel v2.8.3 allows attackers to create an admin user with an arbitrary credentials. Additional Analyst Notes: - CVE Program Container: References: - https://forum.rukovoditel.net/viewtopic.php?f=19&t=2760 - https://gist.github.com/victomteng1997/d5f2db1d37aed5792c28685068ec41e2
CVE ID: CVE-2021-30227 State: PUBLISHED Published: 2021-04-29T15:12:01 Last Updated: 2024-08-03T22:24:59.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in the article comments feature in emlog 6.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/emlog/emlog/issues/79
CVE ID: CVE-2021-30228 State: PUBLISHED Published: 2021-04-29T15:44:03 Last Updated: 2024-08-03T22:24:59.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: The api/ZRAndlink/set_ZRAndlink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iandlink_proc_enable parameter. Additional Analyst Notes: - CVE Program Container: References: - http://iot.10086.cn/?l=en-us - https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520 - https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection2.md
CVE ID: CVE-2021-30229 State: PUBLISHED Published: 2021-04-29T15:44:03 Last Updated: 2024-08-03T22:24:59.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: The api/zrDm/set_zrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dm_enable, AppKey, or Pwd parameter. Additional Analyst Notes: - CVE Program Container: References: - http://iot.10086.cn/?l=en-us - https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520 - https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection3.md
CVE ID: CVE-2021-30230 State: PUBLISHED Published: 2021-04-29T15:44:03 Last Updated: 2024-08-03T22:24:59.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: The api/ZRFirmware/set_time_zone interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the zonename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://iot.10086.cn/?l=en-us - https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520 - https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection5.md
CVE ID: CVE-2021-30231 State: PUBLISHED Published: 2021-04-29T15:44:03 Last Updated: 2024-08-03T22:24:59.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: The api/zrDm/set_ZRElink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the bssaddr, abiaddr, devtoken, devid, elinksync, or elink_proc_enable parameter. Additional Analyst Notes: - CVE Program Container: References: - http://iot.10086.cn/?l=en-us - https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520 - https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection4.md
CVE ID: CVE-2021-30232 State: PUBLISHED Published: 2021-04-29T15:44:03 Last Updated: 2024-08-03T22:24:59.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: The api/ZRIGMP/set_IGMP_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the IGMP_PROXY_WAN_CONNECT parameter. Additional Analyst Notes: - CVE Program Container: References: - http://iot.10086.cn/?l=en-us - https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520 - https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection6.md
CVE ID: CVE-2021-30233 State: PUBLISHED Published: 2021-04-29T15:44:03 Last Updated: 2024-08-03T22:24:59.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iptv_vlan parameter. Additional Analyst Notes: - CVE Program Container: References: - http://iot.10086.cn/?l=en-us - https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520 - https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection8.md
CVE ID: CVE-2021-30234 State: PUBLISHED Published: 2021-04-29T15:44:04 Last Updated: 2024-08-03T22:24:59.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: The api/ZRIGMP/set_MLD_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the MLD_PROXY_WAN_CONNECT parameter. Additional Analyst Notes: - CVE Program Container: References: - http://iot.10086.cn/?l=en-us - https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520 - https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection7.md
CVE ID: CVE-2021-30245 State: PUBLISHED Published: 2021-04-15T19:30:14 Last Updated: 2024-08-03T22:24:59.592Z Vendors: Apache Software Foundation Products: Apache OpenOffice Problem Types: Insecure non-http(s) Hyperlinks could lead to untrusted code execution Description: The project received a report that all versions of Apache OpenOffice through 4.1.8 can open non-http(s) hyperlinks. The problem has existed since about 2006 and the issue is also in 4.1.9. If the link is specifically crafted this could lead to untrusted code execution. It is always best practice to be careful opening documents from unknown and unverified sources. The mitigation in Apache OpenOffice 4.1.10 (unreleased) assur
ful opening documents from unknown and unverified sources. The mitigation in Apache OpenOffice 4.1.10 (unreleased) assures that a security warning is displayed giving the user the option of continuing to open the hyperlink. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r87ff11512e4883052991e6b725e20294224034ea8453b811fb3ee735%40%3Cusers.openoffice.apache.org%3E - https://lists.apache.org/thread.html/r87ff11512e4883052991e6b725e20294224034ea8453b811fb3ee735%40%3Cdev.openoffice.apache.org%3E - https://lists.apache.org/thread.html/ra2cabdc083d5160a84de9a6436296ee5030fb3a16dc490dee4f983d5%40%3Cdev.openoffice.apache.org%3E - https://lists.ap
read.html/ra2cabdc083d5160a84de9a6436296ee5030fb3a16dc490dee4f983d5%40%3Cdev.openoffice.apache.org%3E - https://lists.apache.org/thread.html/r87ff11512e4883052991e6b725e20294224034ea8453b811fb3ee735%40%3Cusers.openoffice.apache.org%3E - https://lists.apache.org/thread.html/ra2cabdc083d5160a84de9a6436296ee5030fb3a16dc490dee4f983d5%40%3Cusers.openoffice.apache.org%3E - https://lists.apache.org/thread.html/r7c01173f763b0c4212ada0e6ab283984d6e058d72258efce85c006ab%40%3Cannounce.apache.org%3E
CVE ID: CVE-2021-30246 State: PUBLISHED Published: 2021-04-07T20:11:56 Last Updated: 2024-08-03T22:24:59.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the jsrsasign package through 10.1.13 for Node.js, some invalid RSA PKCS#1 v1.5 signatures are mistakenly recognized to be valid. NOTE: there is no known practical attack. Additional Analyst Notes: - CVE Program Container: References: - https://kjur.github.io/jsrsasign/ - https://github.com/kjur/jsrsasign/issues/478 - https://github.com/kjur/jsrsasign/releases/tag/10.1.13
CVE ID: CVE-2021-30254 State: PUBLISHED Published: 2021-11-12T06:15:51 Last Updated: 2024-08-03T22:24:59.802Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Problem Types: Improper Validation of Array Index in Modem Description: Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IO
mmand in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2021-bulletin
CVE ID: CVE-2021-30255 State: PUBLISHED Published: 2021-11-12T06:15:53 Last Updated: 2024-08-03T22:24:59.589Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Problem Types: Improper Validation of Array Index in RFA Description: Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, S
Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2021-bulletin
CVE ID: CVE-2021-30256 State: PUBLISHED Published: 2021-10-20T06:31:34 Last Updated: 2024-08-03T22:24:59.644Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT Problem Types: Buffer Copy Without Checking Size of Input in VR Service Description: Possible stack overflow due to improper validation of camera name length before copying the name in VR Service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/comp
Snapdragon Industrial IOT Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin
CVE ID: CVE-2021-30257 State: PUBLISHED Published: 2021-10-20T06:31:35 Last Updated: 2024-08-03T22:24:59.653Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT Problem Types: Improper Validation of Array Index in VR Service Description: Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-securit
al IOT Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin
CVE ID: CVE-2021-30258 State: PUBLISHED Published: 2021-10-20T06:31:37 Last Updated: 2024-08-03T22:24:59.806Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables Problem Types: Stack-based Buffer Overflow in VR Service Description: Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables Additional Analyst Notes: - CVE Program Container:
pdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin
CVE ID: CVE-2021-30259 State: PUBLISHED Published: 2021-11-12T06:15:55 Last Updated: 2024-08-03T22:24:59.691Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking Problem Types: Improper Input Validation in Audio Description: Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial
entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2021-bulletin
CVE ID: CVE-2021-30260 State: PUBLISHED Published: 2021-09-17T07:05:25 Last Updated: 2024-08-03T22:24:59.594Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking Problem Types: Integer Overflow to Buffer Overflow in WLAN Description: Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration c
to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin
CVE ID: CVE-2021-30261 State: PUBLISHED Published: 2021-09-17T07:05:27 Last Updated: 2024-08-03T22:24:59.767Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Problem Types: Buffer Copy Without Checking Size of Input in WLAN Description: Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon V
in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin
CVE ID: CVE-2021-30262 State: PUBLISHED Published: 2022-01-03T07:25:40 Last Updated: 2024-08-03T22:24:59.803Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Problem Types: Use After Free in Modem Description: Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil
Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2021-bulletin
CVE ID: CVE-2021-30263 State: PUBLISHED Published: 2021-11-12T06:15:56 Last Updated: 2024-08-03T22:24:59.893Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music Problem Types: Use After Free in Modem Description: Possible race condition can occur due to lack of synchronization mechanism when On-Device Logging node open twice concurrently in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bull
Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2021-bulletin
CVE ID: CVE-2021-30264 State: PUBLISHED Published: 2021-11-12T06:15:58 Last Updated: 2024-08-03T22:24:59.751Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking Problem Types: Use After Free in Modem Description: Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdra
Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2021-bulletin
CVE ID: CVE-2021-30265 State: PUBLISHED Published: 2021-11-12T06:15:59 Last Updated: 2024-08-03T22:24:59.634Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Problem Types: Information Exposure in Modem Description: Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing Filter and Route statistics in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrag
and Route statistics in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2021-bulletin
CVE ID: CVE-2021-30266 State: PUBLISHED Published: 2021-11-12T06:16:01 Last Updated: 2024-08-03T22:24:59.623Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking Problem Types: Use After Free in WLAN Description: Possible use after free due to improper memory validation when initializing new interface via Interface add command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria
d command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/november-2021-bulletin
CVE ID: CVE-2021-30267 State: PUBLISHED Published: 2022-01-03T07:25:41 Last Updated: 2024-08-03T22:24:59.623Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile Problem Types: Integer Overflow to Buffer Overflow in Modem Description: Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile Additional Analyst Notes: - CVE Program Contain
y, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2021-bulletin