Menu

Star on GitHub · 3.2k

2022

25,043 vulnerabilities published in 2022.

Results

25,043· Page 198/501
7.8
CVE-2022-20282

In AppWidget, there is a possible way to start an activity from the background due to a missing permission check. This c

7.8
CVE-2022-20281

In Core, there is a possible way to start an activity from the background due to a missing permission check. This could

3.3
CVE-2022-20280

In MMSProvider, there is a possible read of protected data due to improper input validationSQL injection. This could lea

5.5
CVE-2022-20279

In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due

5.5
CVE-2022-20278

In Accounts, there is a possible way to write sensitive information to the system log due to insufficient log filtering.

5.5
CVE-2022-20277

In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due

5.5
CVE-2022-20276

In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due

5.5
CVE-2022-20275

In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due

7.8
CVE-2022-20274

In Keyguard, there is a missing permission check. This could lead to local escalation of privilege and prevention of scr

6.5
CVE-2022-20273

In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote informatio

5.5
CVE-2022-20272

In PermissionController, there is a possible misunderstanding about the default SMS application's permission set due to

7.8
CVE-2022-20271

In PermissionController, there is a possible way to grant some permissions without user consent due to misleading or ins

5.5
CVE-2022-20270

In Content, there is a possible way to learn gmail account name on the device due to a permissions bypass. This could le

6.8
CVE-2022-20269

In Bluetooth, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat

7.8
CVE-2022-20268

In RestrictionsManager, there is a possible way to send a broadcast that should be restricted to system apps due to a pe

3.3
CVE-2022-20267

In bluetooth, there is a possible way to enable or disable bluetooth connection without user consent due to a missing pe

5.0
CVE-2022-20266

In Companion, there is a possible way to keep a service running with elevated importance without showing foreground serv

4.6
CVE-2022-20265

In Settings, there is a possible way to bypass factory reset permissions due to a permissions bypass. This could lead to

5.5
CVE-2022-20263

In ActivityManager, there is a way to read process state for other users due to a missing permission check. This could l

3.3
CVE-2022-20262

In ActivityManager, there is a possible way to check another process's capabilities due to a missing permission check. T

2.3
CVE-2022-20261

In LocationManager, there is a possible way to get location information due to a missing permission check. This could le

5.5
CVE-2022-20260

In the Phone app, there is a possible crash loop due to resource exhaustion. This could lead to local persistent denial

5.5
CVE-2022-20259

In Telephony, there is a possible leak of ICCID and EID due to a missing permission check. This could lead to local info

7.8
CVE-2022-20258

In Bluetooth, there is a possible way to bypass compiler exploit mitigations due to a configuration error. This could le

3.3
CVE-2022-20257

In Bluetooth, there is a possible way to pair a display only device without PIN confirmation due to a logic error in the

6.4
CVE-2022-20256

In the Audio HAL, there is a possible out of bounds write due to a race condition. This could lead to local escalation o

4.4
CVE-2022-20255

In SettingsProvider, there is a possible way to read or change the default ringtone due to a missing permission check. T

8.8
CVE-2022-20254

In Wi-Fi, there is a permissions bypass. This could lead to local escalation of privilege from the guest user with no ad

6.5
CVE-2022-20253

In Bluetooth, there is a possible cleanup failure due to an uncaught exception. This could lead to remote denial of serv

7.2
CVE-2021-44720

In Ivanti Pulse Secure Pulse Connect Secure (PCS) before 9.1R12, the administrator password is stored in the HTML source

6.9
CVE-2022-2503

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/fi

6.1
CVE-2022-2390

Apps developed with Google Play Services SDK incorrectly had the mutability flag set to PendingIntents that were passed

5.3
CVE-2022-38180

In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases

4.7
CVE-2022-38179

JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack

6.3
CVE-2022-2779

A vulnerability classified as critical was found in SourceCodester Gas Agency Management System. Affected by this vulner

5.5
CVE-2022-35678

Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are

7.8
CVE-2022-35677

Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffe

7.8
CVE-2022-35676

Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffe

7.8
CVE-2022-35675

Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Use After Free v

7.8
CVE-2022-35674

Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds r

7.8
CVE-2022-35673

Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds r

5.5
CVE-2022-35671

Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are

5.5
CVE-2022-35670

Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are

5.5
CVE-2022-35668

Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are

7.8
CVE-2022-35667

Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are

7.8
CVE-2022-35666

Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are

7.8
CVE-2022-35665

Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are

5.5
CVE-2022-34264

Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds r

7.8
CVE-2022-34263

Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by a Use After Free vulnerability

5.5
CVE-2022-34262

Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds read vulnerabi

Test your stack for 2022issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.