CVEs published January 3, 2022
104 CVEs were published on January 3, 2022: 5 critical, 35 high.
- Published
- 104
- Critical
- 5
- High
- 35
- Medium
- 7
- Low
- 1
- Unrated
- 56
- Now in CISA KEV
- 0
- Fix available
- 27
Most affected products
- Huawei HarmonyOS
- 27
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 21
- Huawei EMUI · Huawei Magic UI +1
- 11
- Booster for WooCommerce
- 3
- Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- 3
- EMUI;Magic UI
- 2
- LiteSpeed Cache
- 2
- ManageEngine ADSelfService Plus
- 2
- Qualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…
- 2
- SUN & MOON RISE CO. Shockwall
- 2
Critical 5
- CVE-2021-39990The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experieHuawei HarmonyOS
- CVE-2021-30351An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon AutoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30276Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon CompQualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2021-30275Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, SnapdrQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-25981Talkyard - Insufficient Session Expirationdebiki talkyard
High 35
- CVE-2021-39967There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in Smartphones.SuccessfHuawei EMUI · Huawei Magic UI +1
- CVE-2021-37133There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentHuawei EMUI · Huawei Magic UI +1
- CVE-2021-39988The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to reHuawei HarmonyOS
- CVE-2021-39989The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulneHuawei HarmonyOS
- CVE-2021-39987The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to restHuawei HarmonyOS
- CVE-2021-39985The HwNearbyMain module has a Improper Validation of Array Index vulnerability.Successful exploitation of this vulnerability may cause a proHuawei HarmonyOS
- CVE-2021-39984Huawei idap module has a Out-of-bounds Read vulnerability.Successful exploitation of this vulnerability may cause Denial of Service.Huawei HarmonyOS
- CVE-2021-39977The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to reHuawei HarmonyOS
- CVE-2021-39983The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to restHuawei HarmonyOS
- CVE-2021-3837Improper Authorization in openwhyd/openwhydopenwhyd/openwhyd
- CVE-2021-24786Download Monitor < 4.4.5 - Admin+ SQL InjectionDownload Monitor
- CVE-2021-45917SUN & MOON RISE CO., LTD. Shockwall - Improper AuthenticationSUN & MOON RISE CO. Shockwall
- CVE-2021-44158ASUS RT-AX56U Router - Stack-based buffer overflowASUS RT-AX56U
- CVE-2021-30337Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, SnQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30336Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdragon Auto, Snapdragon Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30335Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon AQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30303Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, SQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30293Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30289Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon CompuQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30283Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT, Snapdragon IndQualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…
- CVE-2021-30282Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, SnapdragoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30279Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapdragon Compute, SnapdQualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2021-30278Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30274Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, SnapdraQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30273Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30272Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, SnaQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30271Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, SnapdragonQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30270Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon AQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30269Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, SnapdragonQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30268Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon CoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30267Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon Compute, SnQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30262Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1894Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, SQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11263An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon ConnectiQualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2021-25994Userfrosting - Host-Header Injection Leads to Account Takeoveruserfrosting · userfrosting/userfrosting
Medium, low and unrated 64
- CVE-2021-45829HDF5 1.13.1-1 is affected by: segmentation fault, which causes a Denial of Service.
- CVE-2021-38576A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty.EDK II
- CVE-2021-37110There is a Timing design defects in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.EMUI;Magic UI;Harmony OS
- CVE-2021-39974There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.Huawei EMUI · Huawei Magic UI +1
- CVE-2021-39973There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down.Huawei EMUI · Huawei Magic UI +1
- CVE-2021-39969There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentHuawei EMUI · Huawei Magic UI +1
- CVE-2021-39966There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulnerability may affect service confidentialiHuawei EMUI · Huawei Magic UI +1
- CVE-2021-37118The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this vulnerability may leHuawei HarmonyOS
- CVE-2021-37112Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability may leaHuawei HarmonyOS
- CVE-2021-37119There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.Huawei EMUI · Huawei Magic UI +1
- CVE-2021-37117There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.Huawei EMUI · Huawei Magic UI +1
- CVE-2021-37113There is a Privilege escalation vulnerability with the file system component in Smartphone.Successful exploitation of this vulnerability mayHuawei EMUI · Huawei Magic UI +1
- CVE-2021-37114There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.Huawei EMUI · Huawei Magic UI +1
- CVE-2021-37111There is a Memory leakage vulnerability in Smartphone.Successful exploitation of this vulnerability may cause memory exhaustion.Huawei EMUI · Huawei Magic UI +1
- CVE-2021-39982Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and writeHuawei HarmonyOS
- CVE-2021-39980Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulneraHuawei HarmonyOS
- CVE-2021-39981Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this vulHuawei HarmonyOS
- CVE-2021-39979HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity.Huawei HarmonyOS
- CVE-2021-39978Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues.Huawei HarmonyOS
- CVE-2021-39972MyHuawei-App has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability coHuawei HarmonyOS
- CVE-2021-39975Hilinksvc has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause denial of service attacks.Huawei HarmonyOS
- CVE-2021-39971Password vault has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability could cHuawei HarmonyOS
- CVE-2021-39970HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the systeHuawei HarmonyOS
- CVE-2021-37134Location-related APIs exists a Race Condition vulnerability.Successful exploitation of this vulnerability may use Higher Permissions for invHuawei HarmonyOS
- CVE-2021-39968Changlian Blocklist has a Business Logic Errors vulnerability .Successful exploitation of this vulnerability may expand the attack surface oHuawei HarmonyOS
- CVE-2021-37132PackageManagerService has a Permissions, Privileges, and Access Controls vulnerability .Successful exploitation of this vulnerability may caHuawei HarmonyOS
- CVE-2021-37126Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this vulnerabilityHuawei HarmonyOS
- CVE-2021-37128HwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability may write any file.Huawei HarmonyOS
- CVE-2021-37125Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this vulnerabilityHuawei HarmonyOS
- CVE-2021-37116PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of tHuawei HarmonyOS
- CVE-2021-37098Hilinksvc service exists a Data Processing Errors vulnerability .Successful exploitation of this vulnerability may cause application crash.Huawei HarmonyOS
- CVE-2021-37120There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel crash or privilege escalEMUI;Magic UI
- CVE-2021-37121There is a Configuration defects in Smartphone.Successful exploitation of this vulnerability may elevate the MEID (IMEI) permission.EMUI;Magic UI
- CVE-2021-20148ManageEngine ADSelfService Plus below build 6116 stores the password policy file for each domain under the html/ web root with a predictableManageEngine ADSelfService Plus
- CVE-2021-20147ManageEngine ADSelfService Plus below build 6116 contains an observable response discrepancy in the UMCP operation of the ChangePasswordAPI.ManageEngine ADSelfService Plus
- CVE-2020-23026A NULL pointer dereference in the main() function dhry_1.c of dhrystone 2.1 causes a denial of service (DoS).
- CVE-2021-46109Invalid input sanitizing leads to reflected Cross Site Scripting (XSS) in ASUS RT-AC52U_B1 3.0.0.4.380.10931 can lead to a user session hija
- CVE-2021-45428TLR-2005KSH is affected by an incorrect access control vulnerability.
- CVE-2021-25040Booking Calendar < 8.9.2 - Reflected Cross-Site ScriptingBooking Calendar
- CVE-2021-25030Events Made Easy < 2.2.36 - Subscriber+ SQL InjectionEvents Made Easy
- CVE-2021-25027PowerPack Addons for Elementor < 2.6.2 - Reflected Cross-Site ScriptingPowerPack Addons for Elementor
- CVE-2021-25022UpdraftPlus < 1.16.66 - Reflected Cross-Site ScriptingUpdraftPlus WordPress Backup Plugin
- CVE-2021-25023Speed Booster Pack < 4.3.3.1 - Admin+ SQL InjectionSpeed Booster Pack ⚡ PageSpeed Optimization Suite
- CVE-2021-25021OMGF < 4.5.12 - Admin+ Arbitrary Folder Deletion via Path TraversalOMGF | Host Google Fonts Locally
- CVE-2021-25020CAOS < 4.1.9 - Admin+ Arbitrary Folder Deletion via Path TraversalCAOS | Host Google Analytics Locally
- CVE-2021-25001Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in Product XML Feeds ModuleBooster for WooCommerce
- CVE-2021-25016Chaty < 2.8.3 - Reflected Cross-Site ScriptingFloating Chat Widget: Contact Icons, Messages, Telegram, Em…
- CVE-2021-25000Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in General ModuleBooster for WooCommerce
- CVE-2021-24991WooCommerce PDF Invoices & Packing Slips < 2.10.5 - Reflected Cross-Site ScriptingWooCommerce PDF Invoices & Packing Slips
- CVE-2021-24999Booster for Woocommerce < 5.4.9 - Reflected Cross-Site Scripting in PDF Invoicing ModuleBooster for WooCommerce
- CVE-2021-24973Site Reviews < 5.17.3 - Unauthenticated Stored Cross-Site ScriptingSite Reviews
- CVE-2021-24964LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSSLiteSpeed Cache
- CVE-2021-24963LiteSpeed Cache < 4.4.4 - Admin+ Reflected Cross-Site ScriptingLiteSpeed Cache
- CVE-2021-24893Stars Rating < 3.5.1 - Comments Denial of ServiceStars Rating
- CVE-2021-24831Tab - Accordion, FAQ < 1.3.2 - Unauthenticated AJAX CallsTab – Accordion, FAQ
- CVE-2021-24828Mortgage Calculator / Loan Calculator < 1.5.17 - Contributor+ Stored Cross-Site ScriptingMortgage Calculator / Loan Calculator
- CVE-2021-24680WP Travel Engine < 5.3.1 - Editor+ Stored Cross-Site ScriptingWP Travel Engine – Travel and Tour Booking Plugin
- CVE-2021-44674An information exposure issue has been discovered in Opmantek Open-AudIT 4.2.0.
- CVE-2021-45916SUN & MOON RISE CO., LTD. Shockwall - Improper Input ValidationSUN & MOON RISE CO. Shockwall
- CVE-2021-35093Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial of service in BlueCQualcomm BlueCore
- CVE-2021-30348Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30298Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interfaQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2021-1918Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon IndustrQualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…
- CVE-2022-0079Generation of Error Message Containing Sensitive Information in star7th/showdocstar7th/showdoc · showdoc/showdoc