2020

In NetworkStackNotifier, there is a possible permissions bypass due to an unsafe implicit PendingIntent. This could lead

In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In NFC, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosu

In Bluetooth, there is a possible spoofing of bluetooth device metadata due to a missing permission check. This could le

In Bluetooth, there is a possible control over Bluetooth enabled state due to a missing permission check. This could lea

In Bluetooth AVRCP, there is a possible leak of audio metadata due to residual data. This could lead to remote informati

In hwservicemanager, there is a possible out of bounds write due to freeing a wild pointer. This could lead to local esc

In the Settings app, there is an insecure default value. This could lead to local escalation of privilege and tapjacking

NVIDIA GeForce NOW, versions prior to 2.0.23 (Windows, macOS) and versions prior to 5.31 (Android, Shield TV), contains

NVIDIA GeForce NOW, versions prior to 2.0.23 on Windows and macOS, contains a vulnerability in the desktop application s

An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files all

In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. This could lead to loc

In the audio server, there is a missing permission check. This could lead to local escalation of privilege regarding aud

An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4. The CSRF prevention token is stored in a request cookie

An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4. The /usage page of Gradle Enterprise conveys high level

An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. Cross-site transmission

An issue was discovered in Gradle Enterprise 2017.3 - 2020.2.4 and Gradle Enterprise Build Cache Node 1.0 - 9.2. Unrestr

The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=com_pago&view=c

An issue was discovered in DotPlant2 before 2020-09-14. In class Pay2PayPayment in payment/Pay2PayPayment.php, there is

SaferVPN before 5.0.3.3 on Windows could allow low-privileged users to create or overwrite arbitrary files, which could

webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types.

In libmpeg2dec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalati

In NFC, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of pri

In libavb, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of pr

In PackageInstaller, there is a possible permissions bypass due to a tapjacking vulnerability. This could lead to local

In Notification Access Confirmation, there is a possible permissions bypass due to uninformed consent. This could lead t

In SurfaceFlinger, there is a possible use-after-free due to improper locking. This could lead to local escalation of pr

In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation

In DocumentsUI, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of p

In DisplayManager, there is a possible permission bypass due to a missing permission check. This could lead to local esc

In the mp3 extractor, there is a possible out of bounds write due to uninitialized data. This could lead to remote code

In LLVM, there is a possible ineffective stack cookie placement due to stack frame double reservation. This could lead t

In the Media extractor, there is a possible use after free due to improper locking. This could lead to remote code execu

In NetworkPolicyManagerService, there is a possible permissions bypass due to a missing permission check. This could lea

In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access

In WindowManager, there is a possible launch of an unexpected app due to a confused deputy. This could lead to local esc

In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local

In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to remote code ex

In screencap, there is a possible command injection due to improper input validation. This could lead to local escalatio

SoyCMS 3.0.2 and earlier is affected by Reflected Cross-Site Scripting (XSS) which leads to Remote Code Execution (RCE)

The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery (CSRF) and Remote Code Execution (RCE). T

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, rela

In Pixel's use of the Catpipe library, there is possible memory corruption due to a use after free. This could lead to l

In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could le

In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to

In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could l

In manifest files of the SmartSpace package, there is a possible tapjacking vector due to a missing permission check. Th

The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm (involving an increment) that allows a malici

The Reset Password add-on before 1.2.0 for Alfresco suffers from CMIS-SQL Injection, which allows a malicious user to in