2023

In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions withou

In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local

In multiple functions of MediaSessionRecord.java, there is a possible Intent rebroadcast due to a confused deputy. This

In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional

In launchDeepLinkIntentToRight of SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities

In AddSupervisedUserActivity, guest users are not prevented from starting the activity due to missing permissions checks

In read_paint of ttcolr.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to loca

In onAttach of SettingsPreferenceFragment.java, there is a possible bypass of Factory Reset Protections due to a confuse

In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and unins

In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to bypass factory reset protection due to inc

In getGroupState of GrantPermissionsViewModel.kt, there is a possible way to keep a one-time permission granted due to a

In bta_av_rc_disc_done of bta_av_act.cc, there is a possible out of bounds write due to a missing bounds check. This cou

In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a possible out of bounds write due to a heap buffer overflow. Thi

In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the

In addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due t

In onPackageAddedInternal of PermissionManagerService.java, there is a possible way to silently grant a permission after

In parseParamsBlob of types.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in

A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in

A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The

A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The

A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in

A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the

Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments. Several URI Schemes ar

Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead t

Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. Pri

smartCARS 3 is flight tracking software. In version 0.5.8 and prior, all persons who have failed login attempts will hav

A stack overfow in SoftMaker Software GmbH FlexiPDF v3.0.3.0 allows attackers to execute arbitrary code after opening a

The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk.

Insufficient validation of profile field availability condition resulted in an SQL injection risk (by default only avail

NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/s

A use-after-free flaw was found in the Linux kernel’s Ext4 File System in how a user triggers several file operations si

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Acces

File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and cod

Denial of Service in GitHub repository radareorg/radare2 prior to 5.8.6.

An issue found in OpenGoofy Hippo4j v.1.4.3 allows attackers to escalate privileges via the ThreadPoolController of the

A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial

A vulnerability in the deterministic random bit generator (DRBG), also known as pseudorandom number generator (PRNG), in

A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could all

A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an un

A vulnerability in the HTTP-based client profiling feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs)

A vulnerability in the Cisco IOx application hosting subsystem of Cisco IOS XE Software could allow an authenticated, lo

A vulnerability in the management API of Cisco DNA Center could allow an authenticated, remote attacker to elevate privi

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbit

A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Softwar

Reflected Cross-Site Scripting (XSS) vulnerability in Blockonomics WordPress Bitcoin Payments – Blockonomics plugin <= 3

Stack Overflow vulnerability found in 360 D901 allows a remote attacker to cause a Distributed Denial of Service (DDOS)