# CVEs published 2022-01-03

104 CVEs were published on January 3, 2022: 5 critical, 35 high. Days are UTC.

- [CVE-2021-45829](https://cve.now/CVE-2021-45829.md): HDF5 1.13.1-1 is affected by: segmentation fault, which causes a Denial of Service. (no CVSS)
- [CVE-2021-38576](https://cve.now/CVE-2021-38576.md): A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. (no CVSS, EDK II)
- [CVE-2021-37110](https://cve.now/CVE-2021-37110.md): There is a Timing design defects in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality. (no CVSS, EMUI;Magic UI;Harmony OS)
- [CVE-2021-39974](https://cve.now/CVE-2021-39974.md): There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality. (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-39973](https://cve.now/CVE-2021-39973.md): There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down. (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-39969](https://cve.now/CVE-2021-39969.md): There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confident (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-39966](https://cve.now/CVE-2021-39966.md): There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulnerability may affect service confidentiali (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-39967](https://cve.now/CVE-2021-39967.md): There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in Smartphones.Successf (CVSS 7.5, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37133](https://cve.now/CVE-2021-37133.md): There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confident (CVSS 7.5, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-39990](https://cve.now/CVE-2021-39990.md): The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experie (CVSS 9.8, Huawei HarmonyOS)
- [CVE-2021-39988](https://cve.now/CVE-2021-39988.md): The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to re (CVSS 7.5, Huawei HarmonyOS)
- [CVE-2021-39989](https://cve.now/CVE-2021-39989.md): The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulne (CVSS 7.5, Huawei HarmonyOS)
- [CVE-2021-39987](https://cve.now/CVE-2021-39987.md): The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to rest (CVSS 7.5, Huawei HarmonyOS)
- [CVE-2021-39985](https://cve.now/CVE-2021-39985.md): The HwNearbyMain module has a Improper Validation of Array Index vulnerability.Successful exploitation of this vulnerability may cause a pro (CVSS 7.5, Huawei HarmonyOS)
- [CVE-2021-39984](https://cve.now/CVE-2021-39984.md): Huawei idap module has a Out-of-bounds Read vulnerability.Successful exploitation of this vulnerability may cause Denial of Service. (CVSS 7.5, Huawei HarmonyOS)
- [CVE-2021-39977](https://cve.now/CVE-2021-39977.md): The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to re (CVSS 7.5, Huawei HarmonyOS)
- [CVE-2021-39983](https://cve.now/CVE-2021-39983.md): The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to rest (CVSS 7.5, Huawei HarmonyOS)
- [CVE-2021-37118](https://cve.now/CVE-2021-37118.md): The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this vulnerability may le (no CVSS, Huawei HarmonyOS)
- [CVE-2021-37112](https://cve.now/CVE-2021-37112.md): Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability may lea (no CVSS, Huawei HarmonyOS)
- [CVE-2021-37119](https://cve.now/CVE-2021-37119.md): There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS. (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37117](https://cve.now/CVE-2021-37117.md): There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS. (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37113](https://cve.now/CVE-2021-37113.md): There is a Privilege escalation vulnerability with the file system component in Smartphone.Successful exploitation of this vulnerability may (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37114](https://cve.now/CVE-2021-37114.md): There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality. (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-37111](https://cve.now/CVE-2021-37111.md): There is a Memory leakage vulnerability in Smartphone.Successful exploitation of this vulnerability may cause memory exhaustion. (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-39982](https://cve.now/CVE-2021-39982.md): Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and write (no CVSS, Huawei HarmonyOS)
- [CVE-2021-39980](https://cve.now/CVE-2021-39980.md): Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnera (no CVSS, Huawei HarmonyOS)
- [CVE-2021-39981](https://cve.now/CVE-2021-39981.md): Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this vul (no CVSS, Huawei HarmonyOS)
- [CVE-2021-39979](https://cve.now/CVE-2021-39979.md): HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity. (no CVSS, Huawei HarmonyOS)
- [CVE-2021-39978](https://cve.now/CVE-2021-39978.md): Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues. (no CVSS, Huawei HarmonyOS)
- [CVE-2021-39972](https://cve.now/CVE-2021-39972.md): MyHuawei-App has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability co (no CVSS, Huawei HarmonyOS)
- [CVE-2021-39975](https://cve.now/CVE-2021-39975.md): Hilinksvc has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause denial of service attacks. (no CVSS, Huawei HarmonyOS)
- [CVE-2021-39971](https://cve.now/CVE-2021-39971.md): Password vault has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability could c (no CVSS, Huawei HarmonyOS)
- [CVE-2021-39970](https://cve.now/CVE-2021-39970.md): HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the syste (no CVSS, Huawei HarmonyOS)
- [CVE-2021-37134](https://cve.now/CVE-2021-37134.md): Location-related APIs exists a Race Condition vulnerability.Successful exploitation of this vulnerability may use Higher Permissions for inv (no CVSS, Huawei HarmonyOS)
- [CVE-2021-39968](https://cve.now/CVE-2021-39968.md): Changlian Blocklist has a Business Logic Errors vulnerability .Successful exploitation of this vulnerability may expand the attack surface o (no CVSS, Huawei HarmonyOS)
- [CVE-2021-37132](https://cve.now/CVE-2021-37132.md): PackageManagerService has a Permissions, Privileges, and Access Controls vulnerability .Successful exploitation of this vulnerability may ca (no CVSS, Huawei HarmonyOS)
- [CVE-2021-37126](https://cve.now/CVE-2021-37126.md): Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this vulnerability (no CVSS, Huawei HarmonyOS)
- [CVE-2021-37128](https://cve.now/CVE-2021-37128.md): HwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability may write any file. (no CVSS, Huawei HarmonyOS)
- [CVE-2021-37125](https://cve.now/CVE-2021-37125.md): Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this vulnerability (no CVSS, Huawei HarmonyOS)
- [CVE-2021-37116](https://cve.now/CVE-2021-37116.md): PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of t (no CVSS, Huawei HarmonyOS)
- [CVE-2021-37098](https://cve.now/CVE-2021-37098.md): Hilinksvc service exists a Data Processing Errors vulnerability .Successful exploitation of this vulnerability may cause application crash. (no CVSS, Huawei HarmonyOS)
- [CVE-2021-37120](https://cve.now/CVE-2021-37120.md): There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel crash or privilege escal (no CVSS, EMUI;Magic UI)
- [CVE-2021-37121](https://cve.now/CVE-2021-37121.md): There is a Configuration defects in Smartphone.Successful exploitation of this vulnerability may elevate the MEID (IMEI) permission. (no CVSS, EMUI;Magic UI)
- [CVE-2021-20148](https://cve.now/CVE-2021-20148.md): ManageEngine ADSelfService Plus below build 6116 stores the password policy file for each domain under the html/ web root with a predictable (no CVSS, ManageEngine ADSelfService Plus)
- [CVE-2021-20147](https://cve.now/CVE-2021-20147.md): ManageEngine ADSelfService Plus below build 6116 contains an observable response discrepancy in the UMCP operation of the ChangePasswordAPI. (no CVSS, ManageEngine ADSelfService Plus)
- [CVE-2020-23026](https://cve.now/CVE-2020-23026.md): A NULL pointer dereference in the main() function dhry\_1.c of dhrystone 2.1 causes a denial of service (DoS). (no CVSS)
- [CVE-2021-3837](https://cve.now/CVE-2021-3837.md): Improper Authorization in openwhyd/openwhyd (CVSS 8.6, openwhyd/openwhyd)
- [CVE-2021-46109](https://cve.now/CVE-2021-46109.md): Invalid input sanitizing leads to reflected Cross Site Scripting (XSS) in ASUS RT-AC52U\_B1 3.0.0.4.380.10931 can lead to a user session hija (no CVSS)
- [CVE-2021-45428](https://cve.now/CVE-2021-45428.md): TLR-2005KSH is affected by an incorrect access control vulnerability. (no CVSS)
- [CVE-2021-25040](https://cve.now/CVE-2021-25040.md): Booking Calendar \< 8.9.2 - Reflected Cross-Site Scripting (no CVSS, Booking Calendar)
- [CVE-2021-25030](https://cve.now/CVE-2021-25030.md): Events Made Easy \< 2.2.36 - Subscriber+ SQL Injection (no CVSS, Events Made Easy)
- [CVE-2021-25027](https://cve.now/CVE-2021-25027.md): PowerPack Addons for Elementor \< 2.6.2 - Reflected Cross-Site Scripting (no CVSS, PowerPack Addons for Elementor)
- [CVE-2021-25022](https://cve.now/CVE-2021-25022.md): UpdraftPlus \< 1.16.66 - Reflected Cross-Site Scripting (CVSS 6.1, UpdraftPlus WordPress Backup Plugin)
- [CVE-2021-25023](https://cve.now/CVE-2021-25023.md): Speed Booster Pack \< 4.3.3.1 - Admin+ SQL Injection (no CVSS, Speed Booster Pack ⚡ PageSpeed Optimization Suite)
- [CVE-2021-25021](https://cve.now/CVE-2021-25021.md): OMGF \< 4.5.12 - Admin+ Arbitrary Folder Deletion via Path Traversal (no CVSS, OMGF | Host Google Fonts Locally)
- [CVE-2021-25020](https://cve.now/CVE-2021-25020.md): CAOS \< 4.1.9 - Admin+ Arbitrary Folder Deletion via Path Traversal (no CVSS, CAOS | Host Google Analytics Locally)
- [CVE-2021-25001](https://cve.now/CVE-2021-25001.md): Booster for WooCommerce \< 5.4.9 - Reflected Cross-Site Scripting in Product XML Feeds Module (no CVSS, Booster for WooCommerce)
- [CVE-2021-25016](https://cve.now/CVE-2021-25016.md): Chaty \< 2.8.3 - Reflected Cross-Site Scripting (no CVSS, Floating Chat Widget: Contact Icons, Messages, Telegram, Em…)
- [CVE-2021-25000](https://cve.now/CVE-2021-25000.md): Booster for WooCommerce \< 5.4.9 - Reflected Cross-Site Scripting in General Module (no CVSS, Booster for WooCommerce)
- [CVE-2021-24991](https://cve.now/CVE-2021-24991.md): WooCommerce PDF Invoices & Packing Slips \< 2.10.5 - Reflected Cross-Site Scripting (no CVSS, WooCommerce PDF Invoices & Packing Slips)
- [CVE-2021-24999](https://cve.now/CVE-2021-24999.md): Booster for Woocommerce \< 5.4.9 - Reflected Cross-Site Scripting in PDF Invoicing Module (no CVSS, Booster for WooCommerce)
- [CVE-2021-24973](https://cve.now/CVE-2021-24973.md): Site Reviews \< 5.17.3 - Unauthenticated Stored Cross-Site Scripting (no CVSS, Site Reviews)
- [CVE-2021-24964](https://cve.now/CVE-2021-24964.md): LiteSpeed Cache \< 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS (CVSS 6.1, LiteSpeed Cache)
- [CVE-2021-24963](https://cve.now/CVE-2021-24963.md): LiteSpeed Cache \< 4.4.4 - Admin+ Reflected Cross-Site Scripting (no CVSS, LiteSpeed Cache)
- [CVE-2021-24893](https://cve.now/CVE-2021-24893.md): Stars Rating \< 3.5.1 - Comments Denial of Service (no CVSS, Stars Rating)
- [CVE-2021-24831](https://cve.now/CVE-2021-24831.md): Tab - Accordion, FAQ \< 1.3.2 - Unauthenticated AJAX Calls (no CVSS, Tab – Accordion, FAQ)
- [CVE-2021-24828](https://cve.now/CVE-2021-24828.md): Mortgage Calculator / Loan Calculator \< 1.5.17 - Contributor+ Stored Cross-Site Scripting (no CVSS, Mortgage Calculator / Loan Calculator)
- [CVE-2021-24786](https://cve.now/CVE-2021-24786.md): Download Monitor \< 4.4.5 - Admin+ SQL Injection (CVSS 7.2, Download Monitor)
- [CVE-2021-24680](https://cve.now/CVE-2021-24680.md): WP Travel Engine \< 5.3.1 - Editor+ Stored Cross-Site Scripting (no CVSS, WP Travel Engine – Travel and Tour Booking Plugin)
- [CVE-2021-44674](https://cve.now/CVE-2021-44674.md): An information exposure issue has been discovered in Opmantek Open-AudIT 4.2.0. (no CVSS)
- [CVE-2021-45917](https://cve.now/CVE-2021-45917.md): SUN & MOON RISE CO., LTD. Shockwall - Improper Authentication (CVSS 8.0, SUN & MOON RISE CO. Shockwall)
- [CVE-2021-45916](https://cve.now/CVE-2021-45916.md): SUN & MOON RISE CO., LTD. Shockwall - Improper Input Validation (CVSS 3.5, SUN & MOON RISE CO. Shockwall)
- [CVE-2021-44158](https://cve.now/CVE-2021-44158.md): ASUS RT-AX56U Router - Stack-based buffer overflow (CVSS 8.0, ASUS RT-AX56U)
- [CVE-2021-35093](https://cve.now/CVE-2021-35093.md): Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial of service in BlueC (CVSS 6.5, Qualcomm BlueCore)
- [CVE-2021-30351](https://cve.now/CVE-2021-30351.md): An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto (CVSS 9.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30348](https://cve.now/CVE-2021-30348.md): Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn (CVSS 6.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30337](https://cve.now/CVE-2021-30337.md): Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Sn (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30336](https://cve.now/CVE-2021-30336.md): Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdragon Auto, Snapdragon (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30335](https://cve.now/CVE-2021-30335.md): Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon A (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30303](https://cve.now/CVE-2021-30303.md): Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, S (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30298](https://cve.now/CVE-2021-30298.md): Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interfa (CVSS 6.7, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2021-30293](https://cve.now/CVE-2021-30293.md): Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, S (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30289](https://cve.now/CVE-2021-30289.md): Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compu (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30283](https://cve.now/CVE-2021-30283.md): Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT, Snapdragon Ind (CVSS 7.1, Qualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…)
- [CVE-2021-30282](https://cve.now/CVE-2021-30282.md): Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdrago (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30279](https://cve.now/CVE-2021-30279.md): Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapdragon Compute, Snapd (CVSS 7.8, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2021-30278](https://cve.now/CVE-2021-30278.md): Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, (CVSS 7.1, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30276](https://cve.now/CVE-2021-30276.md): Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon Comp (CVSS 9.3, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2021-30275](https://cve.now/CVE-2021-30275.md): Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdr (CVSS 9.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30274](https://cve.now/CVE-2021-30274.md): Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdra (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30273](https://cve.now/CVE-2021-30273.md): Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30272](https://cve.now/CVE-2021-30272.md): Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Sna (CVSS 7.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30271](https://cve.now/CVE-2021-30271.md): Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon (CVSS 7.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30270](https://cve.now/CVE-2021-30270.md): Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon A (CVSS 7.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30269](https://cve.now/CVE-2021-30269.md): Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon (CVSS 7.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30268](https://cve.now/CVE-2021-30268.md): Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Co (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30267](https://cve.now/CVE-2021-30267.md): Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon Compute, Sn (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30262](https://cve.now/CVE-2021-30262.md): Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto, (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1918](https://cve.now/CVE-2021-1918.md): Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industr (CVSS 6.5, Qualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…)
- [CVE-2021-1894](https://cve.now/CVE-2021-1894.md): Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, S (CVSS 7.1, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11263](https://cve.now/CVE-2020-11263.md): An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connecti (CVSS 7.3, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2021-25994](https://cve.now/CVE-2021-25994.md): Userfrosting - Host-Header Injection Leads to Account Takeover (CVSS 8.8, userfrosting · userfrosting/userfrosting)
- [CVE-2021-25981](https://cve.now/CVE-2021-25981.md): Talkyard - Insufficient Session Expiration (CVSS 9.8, debiki talkyard)
- [CVE-2022-0079](https://cve.now/CVE-2022-0079.md): Generation of Error Message Containing Sensitive Information in star7th/showdoc (CVSS 5.3, star7th/showdoc · showdoc/showdoc)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-01-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.