Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that caus ...
Continue ReadingSeptember 16, 2022
Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to ...
Continue ReadingSeptember 16, 2022
Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to ...
Continue ReadingSeptember 16, 2022
Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to ...
Continue ReadingSeptember 16, 2022
Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.3.1.Read More ...
Continue ReadingSeptember 16, 2022
Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and NetworkingRead More ...
Continue ReadingSeptember 16, 2022
Information disclosure in video due to buffer over-read while processing avi file in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, ...
Continue ReadingSeptember 16, 2022
Memory corruption in kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon W ...
Continue ReadingSeptember 16, 2022
Back to Main