‼ CVE-2021-35120 ‼
📖 Read
via "National Vulnerability Database".
Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile📖 Read
via "National Vulnerability Database".
‼ CVE-2021-35129 ‼
📖 Read
via "National Vulnerability Database".
Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking📖 Read
via "National Vulnerability Database".
‼ CVE-2021-35121 ‼
📖 Read
via "National Vulnerability Database".
An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27221 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An attacker in machine-in-the-middle could obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown string in an HTTP response body, aka a "BREACH" attack.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30228 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-35111 ‼
📖 Read
via "National Vulnerability Database".
Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile📖 Read
via "National Vulnerability Database".
‼ CVE-2021-35104 ‼
📖 Read
via "National Vulnerability Database".
Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40649 ‼
📖 Read
via "National Vulnerability Database".
In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22064 ‼
📖 Read
via "National Vulnerability Database".
Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables📖 Read
via "National Vulnerability Database".
‼ CVE-2021-35096 ‼
📖 Read
via "National Vulnerability Database".
Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22086 ‼
📖 Read
via "National Vulnerability Database".
Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27219 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is missing general HTTP security headers in the web server configured on port 443. This could aid attackers by making the servers more prone to clickjacking, channel downgrade attacks and other similar client-based attack vectors.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22068 ‼
📖 Read
via "National Vulnerability Database".
kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables📖 Read
via "National Vulnerability Database".
🗓️ GhostTouch: Hackers can reach your phone’s touchscreen without even touching it 🗓️
📖 Read
via "The Daily Swig".
New research shows how electromagnetic interference can be used to trigger arbitrary behavior on mobile touchscreens, although caveats apply📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
GhostTouch: Hackers can reach your phone’s touchscreen without even touching it
New research shows how electromagnetic interference can be used to trigger arbitrary behavior on mobile touchscreens, although caveats apply
🕴 Understanding and Mitigating Single Sign-on Risk 🕴
📖 Read
via "Dark Reading".
SSO's one-to-many architecture is both a big advantage and a weakness.📖 Read
via "Dark Reading".
Dark Reading
Understanding and Mitigating Single Sign-on Risk
SSO's one-to-many architecture is both a big advantage and a weakness.
‼ CVE-2021-40678 ‼
📖 Read
via "National Vulnerability Database".
In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batch_manager&mode=unit.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31273 ‼
📖 Read
via "National Vulnerability Database".
An issue in TopIDP3000 Topsec Operating System tos_3.3.005.665b.15_smpidp allows attackers to perform a brute-force attack via a crafted session_id cookie.📖 Read
via "National Vulnerability Database".
🗓️ Oblivious DNS-over-HTTPS offers privacy enhancements to secure lookup protocol 🗓️
📖 Read
via "The Daily Swig".
ODoH is said to enhance user privacy without compromising performance📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Oblivious DNS-over-HTTPS offers privacy enhancements to secure lookup protocol
ODoH is said to enhance user privacy without compromising performance
👍1👎1
🗓️ LenelS2 access control vulnerabilities leave door open to lock manipulation 🗓️
📖 Read
via "The Daily Swig".
Vendor addresses threat to integrity and availability of physical access systems📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
HID Mercury access control vulnerabilities leave door open to lock manipulation
Manufacturer addresses threat to integrity and availability of products sold to more than 20 OEM vendors
🕴 Optiv MXDR Enhances Detection Coverage With Expanded Cloud Integration 🕴
📖 Read
via "Dark Reading".
Service ingests AWS, GCP and Microsoft Azure data.📖 Read
via "Dark Reading".
Dark Reading
Optiv MXDR Enhances Detection Coverage With Expanded Cloud Integration
Service ingests AWS, GCP and Microsoft Azure data.
‼ CVE-2021-40660 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Delight Nashorn Sandbox 0.2.0. There is an ReDoS vulnerability that can be exploited to launching a denial of service (DoS) attack.📖 Read
via "National Vulnerability Database".