2022

In checkSpsUpdated of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This coul

In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This cou

In openFileAndEnforcePathPermissionsHelper of MediaProvider.java, there is a possible bypass of a permissions check due

In checkUriPermission of MediaProvider.java , there is a possible way to gain access to the content of media provider co

ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service，but it does

ims_ex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions

In clear_data_dlg_text of strings.xml, there is a possible situation when "Clear storage" functionality sets up the wron

In updatePackageMappingsData of UsageStatsService.java, there is a possible way to bypass security and privacy settings

Summary:Product: AndroidVersions: Android SoCAndroid ID: A-204686438

Tokheim Profleet DiaLOG 11.005.02 is affected by SQL Injection. The component is the Field__UserLogin parameter on the l

Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass. A malicious unauthenticated user can

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due t

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary file

A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data exfiltration and unaut

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary file

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause disclosure o

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code execution

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution du

A CWE-269: Improper Privilege Management vulnerability exists that could cause an arbitrary command execution when the s

A CWE-20: Improper Input Validation vulnerability exists that could cause a Denial of Service when a crafted packet is s

A CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause Sensitive data such as login crede

A CWE-287: Improper Authentication vulnerability exists that could allow remote code execution when a malicious file is

A CWE-787: Out-of-bounds Write vulnerability exists that could cause denial of service when an attacker sends a speciall

A CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of the device when an attack

A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files located in the web

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could

In isServiceDistractionOptimized of CarPackageManagerService.java, there is a possible disclosure of installed packages

Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitra

Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerabil

tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv4() at tree.c.

tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv6() at tree.c

This affects the package fastify-multipart before 5.3.1. By providing a name=constructor property it is still possible t

A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 (2021-12-06) in bmp_load(). When the size information i

A Cross Site Scripting (XSS) vulnerability exists in Projeqtor 9.3.1 via /projeqtor/tool/saveAttachment.php, which allow

Dairy Farm Shop Management System v1.0 was discovered to contain hardcoded credentials in the source code which allows a

Under some circumstances, the Drupal core JSON:API module does not properly restrict access to certain content, which ma

The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclo

Drupal's JSON:API and REST/File modules allow file uploads through their HTTP APIs. The modules do not correctly run all

The QuickEdit module does not properly validate access to routes, which could allow cross-site request forgery under som

The Entity Embed module provides a filter to allow embedding entities in content fields. In certain circumstances, the f

Cross-site Scripting (XSS) vulnerability in Drupal core's sanitization API fails to properly filter cross-site scripting

Information Disclosure vulnerability in file module of Drupal Core allows an attacker to gain access to the file metadat

Cross-site Scripting (XSS) vulnerability in ckeditor of Drupal Core allows attacker to inject XSS. This issue affects: D

Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected

The check_alu_op() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bound

An improper authentication vulnerability has been reported to affect QNAP NAS running Kazoo Server. If exploited, this v

Hessian serialization is a network protocol that supports object-based transmission. Apache Cayenne's optional Remote Ob

An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default co

Open Redirect in Packagist microweber/microweber prior to 1.2.11.

OCS Inventory 2.9.1 is affected by Cross Site Scripting (XSS). To exploit the vulnerability, the attacker needs to manip