|
196661
|
3.3 |
LOW
Local
|
google
|
android
|
An improper access control vulnerability in BluetoothSettingsProvider prior to SMR Oct-2021 Release 1 allows untrusted application to overwrite some Bluetooth information.
|
NVD-CWE-Other
|
CVE-2021-25472
|
2024-11-21 14:55 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196662
|
7.5 |
HIGH
Network
|
google
|
android
|
A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion.
|
NVD-CWE-noinfo
|
CVE-2021-25471
|
2024-11-21 14:55 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196663
|
7.9 |
HIGH
Local
|
google
|
android
|
An improper caller check logic of SMC call in TEEGRIS secure OS prior to SMR Oct-2021 Release 1 can be used to compromise TEE.
|
NVD-CWE-Other
|
CVE-2021-25470
|
2024-11-21 14:55 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196664
|
6.7 |
MEDIUM
Local
|
google
|
android
|
A possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows arbitrary code execution.
|
CWE-787
Out-of-bounds Write
|
CVE-2021-25469
|
2024-11-21 14:55 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196665
|
4.4 |
MEDIUM
Local
|
google
|
android
|
A possible guessing and confirming a byte memory vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows attackers to read arbitrary memory address.
|
NVD-CWE-noinfo
|
CVE-2021-25468
|
2024-11-21 14:55 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196666
|
6.7 |
MEDIUM
Local
|
google
|
android
|
Assuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP kernel driver prior to SMR Oct-2021 Release 1 allows privilege escalation to Root by hijacking loaded l…
|
CWE-120
Classic Buffer Overflow
|
CVE-2021-25467
|
2024-11-21 14:55 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196667
|
5.4 |
MEDIUM
Network
|
janeczku
|
calibre-web
|
In “Calibre-web” application, v0.6.0 to v0.6.12, are vulnerable to Stored XSS in “Metadata”. An attacker that has access to edit the metadata information, can inject JavaScript payload in the descrip…
|
CWE-79
Cross-site Scripting
|
CVE-2021-25964
|
2024-11-21 14:55 |
2021-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196668
|
6.1 |
MEDIUM
Network
|
shuup
|
shuup
|
In Shuup, versions 1.6.0 through 2.10.8 are vulnerable to reflected Cross-Site Scripting (XSS) that allows execution of arbitrary javascript code on a victim browser. This vulnerability exists due to…
|
CWE-79
Cross-site Scripting
|
CVE-2021-25963
|
2024-11-21 14:55 |
2021-09-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196669
|
8.8 |
HIGH
Network
|
shuup
|
shuup
|
“Shuup” application in versions 0.4.2 to 2.10.8 is affected by the “Formula Injection” vulnerability. A customer can inject payloads in the name input field in the billing address while buying a prod…
|
CWE-1236
Improper Neutralization of Formula Elements in a CSV File
|
CVE-2021-25962
|
2024-11-21 14:55 |
2021-09-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196670
|
8.0 |
HIGH
Network
|
salesagility
|
suitecrm
|
In “SuiteCRM” application, v7.1.7 through v7.10.31 and v7.11-beta through v7.11.20 fail to properly invalidate password reset links that is associated with a deleted user id, which makes it possible …
|
CWE-640
Weak Password Recovery Mechanism for Forgotten Password
|
CVE-2021-25961
|
2024-11-21 14:55 |
2021-09-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|