2023

In retrieveServiceLocked of ActiveServices.java, there is a possible way to dynamically register a BroadcastReceiver usi

In startInstrumentation of ActivityManagerService.java, there is a possible way to keep the foreground service alive whi

In deliverOnFlushComplete of LocationProviderManager.java, there is a possible way to bypass background activity launch

In isToggleable of SecureNfcEnabler.java and SecureNfcPreferenceController.java, there is a possible way to enable NFC f

In nci_snd_set_routing_cmd of nci_hmsgs.cc, there is a possible out of bounds write due to a missing bounds check. This

In onNullBinding of CallScreeningServiceHelper.java, there is a possible way to record audio without showing a privacy i

In multiple functions of PackageInstallerService.java and related files, there is a possible way to bypass background ac

In avdt_scb_hdl_pkt_no_frag of avdt_scb_act.cc, there is a possible out of bounds write due to an incorrect bounds check

In AlarmManagerActivity of AlarmManagerActivity.java, there is a possible way to bypass background activity launch restr

In PVRSRVBridgeSyncPrimOpTake of the PowerVR kernel driver, a missing size check means there is a possible integer overf

In PVRSRVBridgePhysmemImportSparseDmaBuf of the PowerVR kernel driver, a missing size check means there is a possible in

In PVRSRVBridgeCacheOpQueue of the PowerVR kernel driver, a missing size check means there is a possible integer overflo

In PVRSRVBridgeRGXKickSync of the PowerVR kernel driver, a missing size check means there is a possible integer overflow

In PVRSRVBridgeRGXKickCDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow

In PVRSRVBridgeRGXKickTA3D of the PowerVR kernel driver, a missing size check means there is a possible integer overflow

In PVRSRVBridgeRGXTDMSubmitTransfer of the PowerVR kernel driver, a missing size check means there is a possible integer

In PVRSRVBridgeServerSyncGetStatus of the PowerVR kernel driver, a missing size check means there is a possible integer

In PVRSRVBridgePhysmemNewRamBackedLockedPMR of the PowerVR kernel driver, a missing size check means there is a possible

In PVRSRVBridgeChangeSparseMem of the PowerVR kernel driver, a missing size check means there is a possible integer over

In PVRSRVBridgeDevicememHistorySparseChange of the PowerVR kernel driver, a missing size check means there is a possible

In PVRSRVBridgeRGXKickRS of the PowerVR kernel driver, a missing size check means there is a possible integer overflow t

In PVRSRVBridgeRGXKickVRDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow

A vulnerability within the Avira network protection feature allowed an attacker with local execution rights to cause an

Pay is a payments engine for Ruby on Rails 6.0 and higher. In versions prior to 6.3.2 a payments info page of Pay is sus

Stargate-Bukkit is a mod for the minecraft video game which adds a portal focused environment. In affected versions Mine

Strapi through 4.5.5 does not verify the access or ID tokens issued during the OAuth flow when the AWS Cognito login pro

Strapi through 4.5.5 allows authenticated Server-Side Template Injection (SSTI) that can be exploited to execute arbitra

Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow

Incorrect Access Control in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated user to modify othe

An Improper Privilege Management vulnerability in SUSE kubewarden allows attackers to read arbitrary secrets if they get

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service

Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit

Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to en

Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to

Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with v

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The office docu

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who ca

A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same pr

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. When run in debug mode, Ciliu

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when ac

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability

A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or de

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows remote cod

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows for remote c

A CWE-863: Incorrect Authorization vulnerability exists that could allow access to device credentials on specific DCE e

A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution on upload and install pa

A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitra

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported ve

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a