|
223571
|
9.1 |
CRITICAL
Network
|
qualcomm
|
apq8009_firmware apq8053_firmware apq8096_firmware apq8096au_firmware apq8098_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware…
|
Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/ esm data transport/ bearer modify context reject in Snapdragon Auto, Snapdragon…
|
CWE-125
Out-of-bounds Read
|
CVE-2019-14011
|
2024-11-21 13:25 |
2020-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223572
|
7.8 |
HIGH
Local
|
qualcomm
|
apq8009_firmware apq8098_firmware mdm9150_firmware mdm9607_firmware mdm9650_firmware msm8905_firmware msm8909_firmware msm8998_firmware sda660_firmware sda845_firmware s…
|
Out of bound memory access while processing TZ command handler due to improper input validation on response length received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2019-14009
|
2024-11-21 13:25 |
2020-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223573
|
5.5 |
MEDIUM
Local
|
qualcomm
|
apq8009_firmware apq8017_firmware apq8053_firmware apq8096_firmware apq8096au_firmware apq8098_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware mdm9607_firmware<…
|
Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruption in Snapdragon Auto, Snapdragon Compute…
|
CWE-203
Information Exposure Through Discrepancy
|
CVE-2019-14007
|
2024-11-21 13:25 |
2020-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223574
|
7.8 |
HIGH
Local
|
qualcomm
|
apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware mdm9650_firmware msm8905_firmware msm8909w_firmwar…
|
Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon W…
|
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
|
CVE-2019-14001
|
2024-11-21 13:25 |
2020-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223575
|
8.8 |
HIGH
Adjacent
|
cypress
|
wiced_studio
|
An issue was discovered in Cypress (formerly Broadcom) WICED Studio 6.2 CYW20735B1 and CYW20819A1. As a Bluetooth Low Energy (BLE) packet is received, it is copied into a Heap (ThreadX Block) buffer.…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-13916
|
2024-11-21 13:25 |
2020-04-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223576
|
7.8 |
HIGH
Local
|
ge
|
mark_vie_controll_system
|
GE Mark VIe Controller is shipped with pre-configured hard-coded credentials that may allow root-user access to the controller. A limited application of the affected product may ship without setup an…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2019-13559
|
2024-11-21 13:25 |
2020-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223577
|
8.8 |
HIGH
Network
|
ge
|
mark_vie_control_system
|
GE Mark VIe Controller has an unsecured Telnet protocol that may allow a user to create an authenticated session using generic default credentials. GE recommends that users disable the Telnet service.
|
NVD-CWE-Other
|
CVE-2019-13554
|
2024-11-21 13:25 |
2020-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223578
|
5.4 |
MEDIUM
Network
|
zyxel
|
xgs2210-52hp_firmware
|
In firmware version 4.50 of Zyxel XGS2210-52HP, multiple stored cross-site scripting (XSS) issues allows remote authenticated users to inject arbitrary web script via an rpSys.html Name or Location f…
|
CWE-79
Cross-site Scripting
|
CVE-2019-13495
|
2024-11-21 13:25 |
2020-04-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223579
|
7.8 |
HIGH
Local
|
qualcomm
|
sm8150_firmware
|
Possible out of bound memory access while playing a crafted clip in media player in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdra…
|
CWE-125
Out-of-bounds Read
|
CVE-2019-14048
|
2024-11-21 13:25 |
2020-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223580
|
9.8 |
CRITICAL
Network
|
qualcomm
|
apq8096au_firmware qcs605_firmware sdm439_firmware sm8150_firmware sxr1130_firmware
|
Possible buffer overflow while processing clientlog and serverlog due to lack of validation of data received in logs in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8096AU, QCS60…
|
CWE-120
Classic Buffer Overflow
|
CVE-2019-14045
|
2024-11-21 13:25 |
2020-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|