2023

In LPP_ConvertGNSS_DataBitAssistance of LPP_CommonUtil.c, there is a possible out of bounds read due to a missing bounds

there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lea

there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lea

In on_create_record_event of btif_sdp_server.cc, there is a possible out of bounds read due to a missing null check. Thi

In btm_acl_process_sca_cmpl_pkt of btm_acl.cc, there is a possible out of bounds read due to an incorrect bounds check.

In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow. This could lead to remote informati

In setInputMethodWithSubtypeIdLocked of InputMethodManagerService.java, there is a possible way to setup input methods t

In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to

In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due to a logic error in th

In onCreate of UsbAccessoryUriActivity.java, there is a possible way to escape the Setup Wizard due to a logic error in

In LogResponse of Dns.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remo

In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalati

In getCurrentPrivilegedPackagesForAllUsers of CarrierPrivilegesTracker.java, there is a possible permission bypass due t

In ForegroundUtils of ForegroundUtils.java, there is a possible way to read NFC tag data while the app is still in the b

In xmlParseTryOrFinish of parser.c, there is a possible out of bounds read due to a heap buffer overflow. This could lea

In parseSecurityParamsFromXml of XmlUtil.java, there is a possible bypass of user specified wifi encryption protocol due

In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due t

In isPageSearchEnabled of BillingCycleSettings.java, there is a possible way for the guest user to change data limits du

In multiple functions of WifiCallingSettings.java, there is a possible way to change calling preferences for the admin u

In registerGsmaServiceIntentReceiver of ShannonRcsService.java, there is a possible way to activate/deactivate RCS servi

In lwis_i2c_device_disable of lwis_device_i2c.c, there is a possible UAF due to a logic error in the code. This could le

In hasInputInfo of Layer.cpp, there is a possible bypass of user interaction requirements due to a tapjacking/overlay at

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS

A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service

A stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service

A stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Servi

A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service

D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleAction

A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco S

A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service

A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Soft

AWS data.all is an open source development framework to help users build a data marketplace on Amazon Web Services. data

A stack overflow in the UpdateWanMode function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (

A stack overflow in the EditWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service

A stack overflow in the EditMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (Do

A stack overflow in the AddMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS

A stack overflow in the Edit_BasicSSID function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service

A time-of-check to time-of-use issue exists in io_uring subsystem's IORING_OP_CLOSE operation in the Linux kernel's vers

Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG26

A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of thi

A maliciously crafted SKP file in Autodesk Navisworks 2023 and 2022 be used to trigger use-after-free vulnerability. Exp

An issue was discovered in cmseasy v7.0.0 that allows user credentials to be sent in clear text due to no encryption of

A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vul

A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploi

A Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to cre

Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 (excluding 23.2 SR2 and newer) allows anonym

The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above t

The Formidable Forms WordPress plugin before 6.3.1 does not adequately authorize the user or validate the plugin URL in

The WP Inventory Manager WordPress plugin before 2.1.0.14 does not have CSRF checks, which could allow attackers to make