2020

In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe Pen

In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to

In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe Pending

In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. This

In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. Th

In getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double free. This could lead to

In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenforc

In the app zygote SE Policy, there is a possible permissions bypass. This could lead to local information disclosure wit

In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingIntent

In createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible permissions bypass due to

In onCreate of RequestPermissionActivity.java, there is a possible tapjacking vector due to an insecure default value. T

In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead t

In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to

In Parse_ins of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to re

In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead t

In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to remo

In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could l

In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote informatio

There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID

There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID

In DecodeFrameCombinedMode of combined_decode.cpp, there is a possible out of bounds write due to a heap buffer overflow

There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID

There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID

In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to bec

A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP

In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XS

An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.1

An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitro

An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13

An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.

While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests v

A Improper Access Control vulnerability in the configuration of salt of SUSE Linux Enterprise Module for SUSE Manager Se

Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Infor

A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3.

A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.

A DNS rebinding vulnerability in Freebox v5 before 1.5.29.

A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.

A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2

An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back packe

This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are a

Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90

CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in

CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted licen

Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mecha

Improper certificate validation for certain connections in the Bosch Smart Home System App for iOS prior to version 9.17

An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.3

A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-au

A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF_0290_2.3.01.26 could allow an unauth

A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an exposed

Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit contain