2023

In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This c

In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This c

In fixUpIncomingShortcutInfo of ShortcutService.java, there is a possible way to view another user's image due to a conf

In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a missing bounds check. This cou

Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be

Several versions of ALEOS, including ALEOS 4.16.0, use a hardcoded SSL certificate and private key. An atta

When configured in debugging mode by an authenticated user with administrative privileges, ALEOS 4.16 and e

The ACEManager component of ALEOS 4.16 and earlier does not perform input sanitization during authentication, which c

The ACEManager component of ALEOS 4.16 and earlier allows an authenticated user with Administrator privileg

The ACEManager component of ALEOS 4.16 and earlier does not validate uploaded file names and types, which c

The ACEManager component of ALEOS 4.16 and earlier does not adequately perform input sanitization during authen

In multiple locations, there is a possible way to corrupt memory due to a double free. This could lead to local escalati

In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation

In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audio from the backgroun

In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due t

In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permiss

In onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory corruption. This could lead

In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credent

In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption du

In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds chec

In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free. This could lead to local es

In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a logic error in the code. This

In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions b

In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to rem

Cross Site Request Forgery (CSRF) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control

In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure. This could lea

The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in

The Welcart e-Commerce WordPress plugin before 2.9.5 does not validate files to be uploaded, as well as does not have au

The Filr WordPress plugin before 1.2.3.6 is vulnerable from an RCE (Remote Code Execution) vulnerability, which allows t

The Easy Newsletter Signups WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before usin

Traefik is an open source HTTP reverse proxy and load balancer. The traefik docker container uses 100% CPU when it serve

An arbitrary file upload vulnerability in the component /admin/api.upload/file of ThinkAdmin v6.1.53 allows attackers to

An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a cra

EzViz Studio v2.2.0 is vulnerable to DLL hijacking.

SEMCMS 3.9 is vulnerable to SQL Injection. Due to the lack of security checks on the input of the application, the attac

Out-of-bounds Write vulnerability in Arm Ltd Midgard GPU Userspace Driver, Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an

Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance. An unauthenticated remot

Dell DM5500 contains a privilege escalation vulnerability in the appliance. A remote attacker with low privileges cou

Dell DM5500 5.14.0.0 and prior contain an improper authentication vulnerability. A remote unauthenticated attacker coul

Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance. A remote attacker with high pri

TinyDir is a lightweight C directory and file reader. Buffer overflows in the `tinydir_file_open()` function. This vulne

Path traversal vulnerability exists in RakRak Document Plus Ver.3.2.0.0 to Ver.6.4.0.7 (excluding Ver.6.1.1.3a). If this

In decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In decoder, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of p

In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of servic

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of servic

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of servic

In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of servic