CVE Vulnerability Catalog

Mirasvit Helpdesk MX before 1.5.3 might allow remote attackers to execute arbitrary code by leveraging failure to filter uploaded files.

SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as administrator via a crafted password.

In TecnoVISION DLX Spot Player4 version >1.5.10, there is an arbitrary file upload vulnerability in resource.php that allows remote authenticated users to upload arbitrary files leading to remote command execution.

In TecnoVISION DLX Spot Player4 (all known versions), a hard-coded password 'tecn0visi0n' for the dlxuser account allows remote attackers to log in via SSH.

The vulnerability in ProxyChains-NG before version 4.9 allows local users to gain privileges via a malicious libproxychains4.so library in the current working directory, which is referenced in the LD_PRELOAD path.

In Qualcomm products with Android releases from CAF, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail.

In Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to gain access to kernel memory. Specifically, the ION cache maintenance code is writing to a user supplied address.

All Qualcomm products with Android releases from CAF using the Linux kernel have an off-by-one error in a camera driver, which can lead to out-of-bounds read/write.

In Qualcomm products with Android releases from CAF, in function msm_compr_ioctl_shared, the variable 'ddp->params_length' could be accessed and modified by multiple threads without proper protection. This can lead to race conditions and buffer overflow if the variable is set to a large value.

In Qualcomm products with Android releases from CAF, during the wlan calibration data store and retrieve operation, there are potential race conditions that lead to a memory leak and a buffer overflow during the context switch.

In Qualcomm products with Android releases from CAF, while reading audio data from an unspecified driver, a buffer overflow or integer overflow could occur.

In Qualcomm products with Android releases from CAF, in the function msm_dba_register_client, there is an issue where if client registration fails, the client is freed but not removed from the list. This can lead to a use-after-free situation when traversing the list next time.

In Qualcomm products with Android releases from CAF, in functions msm_isp_check_stream_cfg_cmd and msm_isp_stats_update_cgc_override, the value 'stream_cfg_cmd->num_streams' is not checked, which could lead to an overflow of the array stream_cfg_cmd->stream_handle.

In Qualcomm products with Android releases from CAF, user controlled variables 'nr_cmds' and 'nr_bos' are passed across functions without any checks. This may lead to buffer overflow when the values are too large or negative.

In Qualcomm products with Android releases from CAF, there is an issue with multiple threads performing the device open operation. This may lead to get_pid being called multiple times, while put_pid is called only once.

All Qualcomm products with Android releases from CAF using the Linux kernel have an issue where an output buffer is accessed in one thread and can be potentially freed in another.

All Qualcomm products with Android releases from CAF using the Linux kernel have an issue in an ISP Camera kernel driver function where an incorrect bounds check may lead to an out-of-bounds write.

All Qualcomm products with Android releases from CAF using the Linux kernel may be susceptible to memory corruption. This issue occurs during concurrent calls into ioctl RMNET_IOCTL_ADD_MUX_CHANNEL in the ipa wan driver due to missing locks.

In Qualcomm products with Android releases from CAF, in the audio_aio_ion_lookup_vaddr function, the buffer length provided by the user is used to validate if the buffer is within the valid region. If the buffer length is large enough, the address + length operation could overflow and produce a result far below the valid region.