Vulnerabilities (CVE)

Total 23703 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-29844 2024-04-15 N/A 9.8 CRITICAL
Default credentials on the Web Interface of Evolution Controller 2.x (123 and 123) allows anyone to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the password. There is no warning or prompt to ask the user to change the default password.
CVE-2024-29836 2024-04-15 N/A 9.8 CRITICAL
The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control, allowing for an unauthenticated attacker to update and add user profiles within the application, and gain full access of the site.
CVE-2023-33045 1 Qualcomm 258 Ar8035, Ar8035 Firmware, Csr8811 and 255 more 2024-04-12 N/A 9.8 CRITICAL
Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.
CVE-2023-33028 1 Qualcomm 352 Ar8035, Ar8035 Firmware, Ar9380 and 349 more 2024-04-12 N/A 9.8 CRITICAL
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
CVE-2023-28581 1 Qualcomm 52 Fastconnect 6800, Fastconnect 6800 Firmware, Fastconnect 6900 and 49 more 2024-04-12 N/A 9.8 CRITICAL
Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.
CVE-2023-28562 1 Qualcomm 136 Aqt1000, Aqt1000 Firmware, Fastconnect 6200 and 133 more 2024-04-12 N/A 9.8 CRITICAL
Memory corruption while handling payloads from remote ESL.
CVE-2023-28561 1 Qualcomm 2 Qcn7606, Qcn7606 Firmware 2024-04-12 N/A 9.8 CRITICAL
Memory corruption in QESL while processing payload from external ESL device to firmware.
CVE-2023-28543 1 Qualcomm 8 Qcs405, Qcs405 Firmware, Qcs605 and 5 more 2024-04-12 N/A 9.8 CRITICAL
A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted model (e.g. from a remote source).
CVE-2023-24855 1 Qualcomm 126 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 123 more 2024-04-12 N/A 9.8 CRITICAL
Memory corruption in Modem while processing security related configuration before AS Security Exchange.
CVE-2023-22388 1 Qualcomm 458 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 455 more 2024-04-12 N/A 9.8 CRITICAL
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
CVE-2023-22385 1 Qualcomm 482 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 479 more 2024-04-12 N/A 9.8 CRITICAL
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
CVE-2023-21631 1 Qualcomm 320 205, 205 Firmware, 215 and 317 more 2024-04-12 N/A 9.8 CRITICAL
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
CVE-2022-40537 1 Qualcomm 324 Apq8009, Apq8009 Firmware, Apq8009w and 321 more 2024-04-12 N/A 9.8 CRITICAL
Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.
CVE-2022-40515 1 Qualcomm 318 Apq8009, Apq8009 Firmware, Apq8009w and 315 more 2024-04-12 N/A 9.8 CRITICAL
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
CVE-2022-40514 1 Qualcomm 456 Aqt1000, Aqt1000 Firmware, Ar8031 and 453 more 2024-04-12 N/A 9.8 CRITICAL
Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.
CVE-2022-40510 1 Qualcomm 408 Apq8009, Apq8009 Firmware, Apq8009w and 405 more 2024-04-12 N/A 9.8 CRITICAL
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
CVE-2022-33279 1 Qualcomm 148 Ar9380, Ar9380 Firmware, Csr8811 and 145 more 2024-04-12 N/A 9.8 CRITICAL
Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.
CVE-2022-33259 1 Qualcomm 24 Mdm8207, Mdm8207 Firmware, Mdm9205 and 21 more 2024-04-12 N/A 9.8 CRITICAL
Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.
CVE-2022-33256 1 Qualcomm 130 Ar8035, Ar8035 Firmware, Qca6390 and 127 more 2024-04-12 N/A 9.8 CRITICAL
Memory corruption due to improper validation of array index in Multi-mode call processor.
CVE-2022-33211 1 Qualcomm 24 Mdm8207, Mdm8207 Firmware, Mdm9205 and 21 more 2024-04-12 N/A 9.8 CRITICAL
memory corruption in modem due to improper check while calculating size of serialized CoAP message