2023

In Telecom service, there is a possible missing permission check. This could lead to local information disclosure with n

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no addi

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no addi

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no addi

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no addi

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no addi

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no addi

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no addi

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no addi

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no addi

In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure

In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure

In Telecom service, there is a possible missing permission check. This could lead to local denial of service with System

In telecom service, there is a possible missing permission check. This could lead to local information disclosure with n

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission chec

In linkturbo, there is a possible missing permission check. This could lead to local escalation of privilege with no add

In phasechecksercer, there is a possible missing permission check. This could lead to local escalation of privilege with

In phasecheckserver, there is a possible missing permission check. This could lead to local information disclosure with

In jpg driver, there is a possible use after free due to a logic error. This could lead to remote information disclosure

In Dialer, there is a possible missing permission check. This could lead to local information disclosure with System exe

Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution.

Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow.

Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in the adm group could use

Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version Alpha 1.3.9, allows local attackers to ex

An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary co

libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in

IBM Security Directory Suite 8.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to de

fsevents before 1.2.11 depends on the https://fsevents-binaries.s3-us-west-2.amazonaws.com URL, which might allow an adv

Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem

IBM Jazz Foundation (IBM Engineering Lifecycle Management 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2) could disclose sensitiv

Cross-site Scripting (XSS) - Stored in GitHub repository snipe/snipe-it prior to v6.2.2.

ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because A

In NASA Open MCT (aka openmct) before 3.1.0, prototype pollution can occur via an import action.

In visitUris of Notification.java, there is a possible way to reveal image contents from another user due to a missing p

In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a

In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion. This could

In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to imp

In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission che

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass Op

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified.

A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled,

Discourse-jira is a Discourse plugin allows Jira projects, issue types, fields and field options will be synced automati

D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the cancelPing function.

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client. If explo

An insufficiently protected credentials vulnerability has been reported to affect QVPN Device Client. If exploited, the

A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow au

A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow au