CVEs published January 3, 2022
104 CVEs were published on January 3, 2022: 5 critical, 35 high. Browse them by severity, product and exploitation status.
- Published
- 104
- Critical
- 5
- High
- 35
- Medium
- 7
- Low
- 1
- Unrated
- 56
- Now in CISA KEV
- 0
- Fix available
- 27
Most affected products
- Huawei HarmonyOS
- 27
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 21
- Huawei EMUI · Huawei Magic UI +1
- 11
- Booster for WooCommerce
- 3
- Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- 3
- EMUI;Magic UI
- 2
- LiteSpeed Cache
- 2
- ManageEngine ADSelfService Plus
- 2
- Qualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…
- 2
- SUN & MOON RISE CO. Shockwall
- 2
Critical 5
- CVE-2021-39990The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user…Huawei HarmonyOS
- CVE-2021-30351An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30276Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon…Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2021-30275Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-25981Talkyard - Insufficient Session Expirationdebiki talkyard
High 35
- CVE-2021-39967There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in…Huawei EMUI · Huawei Magic UI +1
- CVE-2021-37133There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service…Huawei EMUI · Huawei Magic UI +1
- CVE-2021-39988The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to…Huawei HarmonyOS
- CVE-2021-39989The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this…Huawei HarmonyOS
- CVE-2021-39987The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to…Huawei HarmonyOS
- CVE-2021-39985The HwNearbyMain module has a Improper Validation of Array Index vulnerability.Successful exploitation of this vulnerability may cause a…Huawei HarmonyOS
- CVE-2021-39984Huawei idap module has a Out-of-bounds Read vulnerability.Successful exploitation of this vulnerability may cause Denial of Service.Huawei HarmonyOS
- CVE-2021-39977The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to…Huawei HarmonyOS
- CVE-2021-39983The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to…Huawei HarmonyOS
- CVE-2021-3837Improper Authorization in openwhyd/openwhydopenwhyd/openwhyd
- CVE-2021-24786Download Monitor < 4.4.5 - Admin+ SQL InjectionDownload Monitor
- CVE-2021-45917SUN & MOON RISE CO., LTD. Shockwall - Improper AuthenticationSUN & MOON RISE CO. Shockwall
- CVE-2021-44158ASUS RT-AX56U Router - Stack-based buffer overflowASUS RT-AX56U
- CVE-2021-30337Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30336Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30335Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30303Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30293Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30289Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30283Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT, Snapdragon…Qualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…
- CVE-2021-30282Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30279Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapdragon Compute…Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2021-30278Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30274Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30273Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
Show all 35 entriesShow fewer entries
- CVE-2021-30272Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30271Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30270Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30269Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30268Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30267Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon Compute…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30262Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1894Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11263An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon…Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2021-25994Userfrosting - Host-Header Injection Leads to Account Takeoveruserfrosting · userfrosting/userfrosting
Medium, low and unrated 64
- CVE-2021-45829HDF5 1.13.1-1 is affected by: segmentation fault, which causes a Denial of Service.
- CVE-2021-38576A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty.EDK II
- CVE-2021-37110There is a Timing design defects in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.EMUI;Magic UI;Harmony OS
- CVE-2021-39974There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.Huawei EMUI · Huawei Magic UI +1
- CVE-2021-39973There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down.Huawei EMUI · Huawei Magic UI +1
- CVE-2021-39969There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service…Huawei EMUI · Huawei Magic UI +1
- CVE-2021-39966There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulnerability may affect service…Huawei EMUI · Huawei Magic UI +1
- CVE-2021-37118The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this vulnerability may…Huawei HarmonyOS
- CVE-2021-37112Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability may…Huawei HarmonyOS
- CVE-2021-37119There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.Huawei EMUI · Huawei Magic UI +1
- CVE-2021-37117There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.Huawei EMUI · Huawei Magic UI +1
- CVE-2021-37113There is a Privilege escalation vulnerability with the file system component in Smartphone.Successful exploitation of this vulnerability…Huawei EMUI · Huawei Magic UI +1
- CVE-2021-37114There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.Huawei EMUI · Huawei Magic UI +1
- CVE-2021-37111There is a Memory leakage vulnerability in Smartphone.Successful exploitation of this vulnerability may cause memory exhaustion.Huawei EMUI · Huawei Magic UI +1
- CVE-2021-39982Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and…Huawei HarmonyOS
- CVE-2021-39980Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this…Huawei HarmonyOS
- CVE-2021-39981Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this…Huawei HarmonyOS
- CVE-2021-39979HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity.Huawei HarmonyOS
- CVE-2021-39978Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues.Huawei HarmonyOS
- CVE-2021-39972MyHuawei-App has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability…Huawei HarmonyOS
- CVE-2021-39975Hilinksvc has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause denial of service attacks.Huawei HarmonyOS
- CVE-2021-39971Password vault has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability could…Huawei HarmonyOS
- CVE-2021-39970HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the…Huawei HarmonyOS
- CVE-2021-37134Location-related APIs exists a Race Condition vulnerability.Successful exploitation of this vulnerability may use Higher Permissions for…Huawei HarmonyOS
- CVE-2021-39968Changlian Blocklist has a Business Logic Errors vulnerability .Successful exploitation of this vulnerability may expand the attack surface…Huawei HarmonyOS
Show all 64 entriesShow fewer entries
- CVE-2021-37132PackageManagerService has a Permissions, Privileges, and Access Controls vulnerability .Successful exploitation of this vulnerability may…Huawei HarmonyOS
- CVE-2021-37126Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this…Huawei HarmonyOS
- CVE-2021-37128HwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability may write any file.Huawei HarmonyOS
- CVE-2021-37125Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this…Huawei HarmonyOS
- CVE-2021-37116PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of…Huawei HarmonyOS
- CVE-2021-37098Hilinksvc service exists a Data Processing Errors vulnerability .Successful exploitation of this vulnerability may cause application crash.Huawei HarmonyOS
- CVE-2021-37120There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel crash or privilege…EMUI;Magic UI
- CVE-2021-37121There is a Configuration defects in Smartphone.Successful exploitation of this vulnerability may elevate the MEID (IMEI) permission.EMUI;Magic UI
- CVE-2021-20148ManageEngine ADSelfService Plus below build 6116 stores the password policy file for each domain under the html/ web root with a…ManageEngine ADSelfService Plus
- CVE-2021-20147ManageEngine ADSelfService Plus below build 6116 contains an observable response discrepancy in the UMCP operation of the ChangePasswordAPI.ManageEngine ADSelfService Plus
- CVE-2020-23026A NULL pointer dereference in the main() function dhry_1.c of dhrystone 2.1 causes a denial of service (DoS).
- CVE-2021-46109Invalid input sanitizing leads to reflected Cross Site Scripting (XSS) in ASUS RT-AC52U_B1 3.0.0.4.380.10931 can lead to a user session…
- CVE-2021-45428TLR-2005KSH is affected by an incorrect access control vulnerability.
- CVE-2021-25040Booking Calendar < 8.9.2 - Reflected Cross-Site ScriptingBooking Calendar
- CVE-2021-25030Events Made Easy < 2.2.36 - Subscriber+ SQL InjectionEvents Made Easy
- CVE-2021-25027PowerPack Addons for Elementor < 2.6.2 - Reflected Cross-Site ScriptingPowerPack Addons for Elementor
- CVE-2021-25022UpdraftPlus < 1.16.66 - Reflected Cross-Site ScriptingUpdraftPlus WordPress Backup Plugin
- CVE-2021-25023Speed Booster Pack < 4.3.3.1 - Admin+ SQL InjectionSpeed Booster Pack ⚡ PageSpeed Optimization Suite
- CVE-2021-25021OMGF < 4.5.12 - Admin+ Arbitrary Folder Deletion via Path TraversalOMGF | Host Google Fonts Locally
- CVE-2021-25020CAOS < 4.1.9 - Admin+ Arbitrary Folder Deletion via Path TraversalCAOS | Host Google Analytics Locally
- CVE-2021-25001Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in Product XML Feeds ModuleBooster for WooCommerce
- CVE-2021-25016Chaty < 2.8.3 - Reflected Cross-Site ScriptingFloating Chat Widget: Contact Icons, Messages, Telegram, Em…
- CVE-2021-25000Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in General ModuleBooster for WooCommerce
- CVE-2021-24991WooCommerce PDF Invoices & Packing Slips < 2.10.5 - Reflected Cross-Site ScriptingWooCommerce PDF Invoices & Packing Slips
- CVE-2021-24999Booster for Woocommerce < 5.4.9 - Reflected Cross-Site Scripting in PDF Invoicing ModuleBooster for WooCommerce
- CVE-2021-24973Site Reviews < 5.17.3 - Unauthenticated Stored Cross-Site ScriptingSite Reviews
- CVE-2021-24964LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSSLiteSpeed Cache
- CVE-2021-24963LiteSpeed Cache < 4.4.4 - Admin+ Reflected Cross-Site ScriptingLiteSpeed Cache
- CVE-2021-24893Stars Rating < 3.5.1 - Comments Denial of ServiceStars Rating
- CVE-2021-24831Tab - Accordion, FAQ < 1.3.2 - Unauthenticated AJAX CallsTab – Accordion, FAQ
- CVE-2021-24828Mortgage Calculator / Loan Calculator < 1.5.17 - Contributor+ Stored Cross-Site ScriptingMortgage Calculator / Loan Calculator
- CVE-2021-24680WP Travel Engine < 5.3.1 - Editor+ Stored Cross-Site ScriptingWP Travel Engine – Travel and Tour Booking Plugin
- CVE-2021-44674An information exposure issue has been discovered in Opmantek Open-AudIT 4.2.0.
- CVE-2021-45916SUN & MOON RISE CO., LTD. Shockwall - Improper Input ValidationSUN & MOON RISE CO. Shockwall
- CVE-2021-35093Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial of service in…Qualcomm BlueCore
- CVE-2021-30348Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30298Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE…Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2021-1918Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon…Qualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…
- CVE-2022-0079Generation of Error Message Containing Sensitive Information in star7th/showdocstar7th/showdoc · showdoc/showdoc