CVE Vulnerability Catalog

In the Modem component, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are needed.

In the Modem component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote privilege escalation if a UE connects to a rogue base station controlled by the attacker. User interaction is needed, but no additional execution privileges are required.

In the Modem component, there is a possible system crash due to improper input validation. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are needed.

In the apu component, there is a possible memory corruption due to improper input validation. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.

In the neuropilot component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.

In the neuropilot component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.

In the Video HAL component, there is a possible escalation of privilege due to a missing bounds check. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.

In the Modem component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote privilege escalation if a UE connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are needed.

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

Dynamically-determined object attributes vulnerability in Jeebase 0.0.1. Affects the updateUser function in the file /user/update/info in the UserService component, where manipulation of user/tempUser arguments leads to dynamically-determined object attributes. The attack can be executed remotely, and the exploit is public. The project has not responded.

A weakness was identified in SourceCodester Drug Recommendation System 1.0 in an unknown function of Admin/add_user.php (Password Handler component). Manipulating the Password argument can lead to missing encryption of sensitive data. The attack can be launched remotely and the exploit has been made available to the public.

A SQL injection vulnerability was found in SourceCodester Drug Recommendation System 1.0 within the mysqli_real_escape_string function of /Admin/add_symptom.php (Symptom Creation component). Manipulating the txtname argument allows SQL injection. The attack can be performed remotely and the exploit is publicly available.

A SQL injection vulnerability was identified in SourceCodester Drug Recommendation System 1.0 in an unknown function of /Admin/add_drug.php (Drug Creation component). Manipulating the txtname/cmdtype/txtusage/txtsideeffect/cmdcontraindication arguments leads to SQL injection. The attack can be performed remotely and the exploit is publicly available.

A SQL injection vulnerability was determined in SourceCodester Drug Recommendation System 1.0 in an unknown function of /Admin/edit_class.php. Manipulating the ID argument leads to SQL injection. The attack can be carried out remotely and the exploit has been publicly disclosed.

GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. A network attacker presenting an invalid certificate once can intercept later automatic update checks, offer a fake version, and execute code as the user upon installation.

Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the window.legcord settings.setConfig bridge. An attacker exploiting a Discord XSS can set additionalArguments to persistently add --proxy-server and --ignore-certificate-errors switches, routing all client traffic through an interception proxy.

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated theme ids. An attacker running script in the Discord origin, such as through XSS, can abuse themes.folder, themes.uninstall, and themes.install to launch local executables, recursively delete directories, and write files outside the themes directory.

Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by sending chaterm:// callbacks without OAuth state validation. Attackers can trigger a crafted callback with attacker-controlled userInfo from a web page, signing the victim into the attacker's account so default data sync uploads saved hosts, passwords, and private keys.

maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigFile() when a kubeconfig lacks certificate-authority-data, ignoring insecure-skip-tls-verify. On-path attackers can impersonate the Kubernetes API server to capture Bearer tokens or Basic credentials and tamper with WebSocket or REST API traffic.

SQL injection vulnerability in SourceCodester Drug Recommendation System 1.0. Affects the file /Auth/add_student.php in the Student Registration component, where manipulation of the cmdschool argument allows SQL injection. The attack can be executed remotely, and the exploit is public.