2023

In registerPhoneAccount of PhoneAccountRegistrar.java, uncaught exceptions in parsing persisted user data could lead to

In pushDynamicShortcut of ShortcutPackage.java, there is a possible way to get the device into a boot loop due to resour

In onSetRuntimePermissionGrantStateByDeviceAdmin of AdminRestrictedPermissionsUtils.java, there is a possible way for th

In m4u, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of

In isp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of

In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalatio

In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati

In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In vcu, there is a possible leak of dma buffer due to a race condition. This could lead to local information disclosure

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privil

In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privil

In adsp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In vcu, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege wi

A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions pri

Collabora Online is a collaborative online office suite based on LibreOffice technology. This vulnerability report descr

vm2 is a sandbox that can run untrusted code with Node's built-in modules. In versions 3.9.17 and lower of vm2 it was po

The WooCommerce Order Status Change Notifier WordPress plugin through 1.1.0 does not have authorisation and CSRF when up

Plugin does not sanitize and escape the URL field in the Pretty Url WordPress plugin through 1.5.4 settings, which could

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Snap Creek Software EZP Maintenance Mode plugin <= 1.0

The Thumbnail carousel slider WordPress plugin before 1.1.10 does not sanitise and escape some parameters before outputt

The Tablesome WordPress plugin before 1.0.9 does not escape various generated URLs, before outputting them in attributes

The Product Addons & Fields for WooCommerce WordPress plugin before 32.0.6 does not sanitize and escape some of its sett

The Ninja Forms Contact Form WordPress plugin before 3.6.22 does not properly escape user input before outputting it bac

The tagDiv Composer WordPress plugin before 4.0 does not sanitise and escape a parameter before outputting it back in th

The Help Desk WP WordPress plugin through 1.2.0 does not sanitise and escape some parameters, which could allow users wi

The BizLibrary WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high pr

The Clock In Portal- Staff & Attendance Management WordPress plugin through 2.1 does not have CSRF check when deleting H

The Clock In Portal- Staff & Attendance Management WordPress plugin through 2.1 does not have CSRF check when deleting d

The Clock In Portal- Staff & Attendance Management WordPress plugin through 2.1 does not have CSRF check when deleting S

The Push Notifications for WordPress by PushAssist WordPress plugin through 3.0.8 does not sanitise and escape various p

The RapidExpCart WordPress plugin through 1.0 does not sanitize and escape the url parameter in the rapidexpcart endpoin

The f(x) TOC WordPress plugin through 1.1.0 does not validate and escape some of its shortcode attributes before outputt

The ActiveCampaign WordPress plugin before 8.1.12 does not validate and escape some of its block options before outputti

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Sumo Social Share Boost plugin <= 4.4 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ozan Canakli White Label Branding for Elementor Page B