Vulnerability index

Browse CVEs

38 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Mi 5s Firmware HIGH 7.5
CVE-2018-20823

The gyroscope on Xiaomi Mi 5s devices allows attackers to cause a denial of service (resonance and false data) via a 20.4 kHz audio signal, aka a MEM…

No fix yet
Fix from $1,950 2019-04-25
Mi Browser MEDIUM 6.5
CVE-2019-10875

A URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6-g (aka the MIUI native browser) and Mint Browser 1.5…

No fix yet
Fix from $1,600 2019-04-05
Mi Mix 2 Firmware MEDIUM 5.5
CVE-2019-8413

On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0…

No fix yet
Fix from $1,600 2019-02-17
Xiaomi Mi A1 Firmware CRITICAL 9.8
CVE-2018-18698

An issue was discovered on Xiaomi Mi A1 tissot_sprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store cleartext Wi-Fi passwords in logcat …

Mitigation only
Fix from $2,300 2018-12-24
Miwifi Os HIGH 8.8
CVE-2018-13023EPSS 24%

System command injection vulnerability in wifi_access in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute system commands via the "time…

No fix yet
Fix from $1,950 2018-11-27
Miwifi Os HIGH 8.8
CVE-2018-16130EPSS 24%

System command injection in request_mitv in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary system commands via the "payload…

No fix yet
Fix from $1,950 2018-11-27
Miwifi Os MEDIUM 6.1
CVE-2018-13022

Cross-site scripting vulnerability in the API 404 page on Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary JavaScript via a m…

No fix yet
Fix from $1,600 2018-11-27
Xiaomi Miwifi Xiaomi 55dd Firmware HIGH 7.5
CVE-2018-16307

An "Out-of-band resource load" issue was discovered on Xiaomi MIWiFi Xiaomi_55DD Version 2.8.50 devices. It is possible to induce the application to …

No fix yet
Fix from $1,950 2018-09-05