2021

In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to an integer overflow

In updateNotification of BeamTransferManager.java, there is a missing permission check. This could lead to local informa

In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds read due to a missing b

In halWrapperDataCallback of hal_wrapper.cc, there is a possible out of bounds write due to a missing bounds check. This

In archiveStoredConversation of MmsService.java, there is a possible way to archive message conversation without user co

In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible exit of emergency callback mode due to a tapjac

In onCreate of WiFiInstaller.java, there is a possible way to install a malicious Hotspot 2.0 configuration due to a tap

In dropFile of WiFiInstaller, there is a way to delete files accessible to CertInstaller due to a confused deputy. This

It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.

A flaw was discovered in gfs2 file system’s handling of acls (access control lists). An unprivileged local attacker coul

In doNotification of AccountManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. T

In ActivityTaskManagerService.startActivity() and AppTaskImpl.startActivity() of ActivityTaskManagerService.java and App

In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe Pe

In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking/overlay attack. This c

In onReceive of DevicePolicyManagerService.java, there is a possible enabling of disabled profiles due to a missing perm

In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This coul

In accessAudioHalPidscpp of TimeCheck.cpp, there is a possible out of bounds read due to a missing bounds check. This co

In wrapUserThread of AudioStream.cpp, there is a possible use after free due to a race condition. This could lead to loc

In decrypt of CryptoPlugin.cpp, there is a possible use-after-free due to a race condition. This could lead to local esc

In ih264e_fmt_conv_422i_to_420sp of ih264e_fmt_conv.c, there is a possible out of bounds read due to a heap buffer overf

In RasterIntraUpdate of motion_est.cpp, there is a possible out of bounds read due to an incorrect bounds check. This co

In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing boun

In Lag_max of p_ol_wgh.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to rem

In fillMainDataBuf of pvmp3_framedecoder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This

In setRange of ABuffer.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remot

In getBlockSum of fastcodemb.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead

In RenderStruct of protostream_objectsource.cc, there is a possible crash due to a missing null check. This could lead t

In isBackupServiceActive of BackupManagerService.java, there is a missing permission check. This could lead to local inf

In wpas_ctrl_msg_queue_timeout of ctrl_iface_unix.c, there is a possible memory corruption due to a use after free. This

In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insec

Cross-site scripting vulnerability in EC-CUBE Category contents plugin (for EC-CUBE 3.0 series) versions prior to versio

Cross-site scripting vulnerability in EC-CUBE Email newsletters management plugin (for EC-CUBE 3.0 series) versions prio

Cross-site scripting vulnerability in EC-CUBE Business form output plugin (for EC-CUBE 3.0 series) versions prior to ver

Cross-site scripting vulnerability in Hitachi Application Server Help (Hitachi Application Server V10 Manual (Windows) v

Improper authentication vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to view the unauthoriz

NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to obtain and/or alter the inf

Cross-site scripting vulnerability in ETUNA EC-CUBE plugins (Delivery slip number plugin (3.0 series) 1.0.10 and earlier

Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote attackers to inject arbit

Improper authorization in handler for custom URL scheme vulnerability in あすけんダイエット (asken diet) for Android versions fro

Manuskript through 0.12.0 allows remote attackers to execute arbitrary code via a crafted settings.pickle file in a proj

Joomla! Core is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise

Joomla! Core is prone to a session fixation vulnerability. An attacker may leverage this issue to hijack an arbitrary se

Joomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to pro

Joomla! Core is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive i

Trusty contains a vulnerability in NVIDIA OTE protocol message parsing code, which is present in all the TAs. An incorre

Bootloader contains a vulnerability in NVIDIA TegraBoot where a potential heap overflow might allow an attacker to contr

The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where th

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation ca

eLabFTW is an open source electronic lab notebook for research labs. This vulnerability allows an attacker to make GET r

An XXE vulnerability exists in ConnectWise Automate before 2021.0.6.132.