Veille CVE

Jeudi 29 juin 2023

8 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 8 Tri : plus récentes
  1. CVE-2021-25489 – Non évaluée Exploitée

    Samsung Mobile Devices

    Samsung Mobile Devices Improper Input Validation Vulnerability — Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string bug leading to kernel panic.

  2. CVE-2021-25487 – Non évaluée Exploitée

    Samsung Mobile Devices

    Samsung Mobile Devices Out-of-Bounds Read Vulnerability — Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer.

  3. CVE-2021-25395 – Non évaluée Exploitée

    Samsung Mobile Devices

    Samsung Mobile Devices Race Condition Vulnerability — Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.

  4. CVE-2021-25394 – Non évaluée Exploitée

    Samsung Mobile Devices

    Samsung Mobile Devices Race Condition Vulnerability — Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.

  5. CVE-2021-25372 – Non évaluée Exploitée

    Samsung Mobile Devices

    Samsung Mobile Devices Improper Boundary Check Vulnerability — Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access.

  6. CVE-2021-25371 – Non évaluée Exploitée

    Samsung Mobile Devices

    Samsung Mobile Devices Unspecified Vulnerability — Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP.

  7. CVE-2019-20500 – Non évaluée Exploitée

    D-Link DWL-2600AP Access Point

    D-Link DWL-2600AP Access Point Command Injection Vulnerability — D-Link DWL-2600AP access point contains an authenticated command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_save configBackup or downloadServerip parameter.

  8. CVE-2019-17621 – Non évaluée Exploitée

    D-Link DIR-859 Router

    D-Link DIR-859 Router Command Execution Vulnerability — D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.