2023

In btm_ble_write_adv_enable_complete of btm_ble_gap.cc, there is a possible out of bounds read due to a missing bounds c

In btm_read_rssi_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This coul

In btm_read_link_quality_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. T

In btm_ble_clear_resolving_list_completecomplete of btm_ble_privacy.cc, there is a possible out of bounds read due to a

In ParseBqrLinkQualityEvt of btif_bqr.cc, there is a possible out of bounds read due to a missing bounds check. This cou

In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check. This c

In btm_read_tx_power_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This

In btu_ble_rc_param_req_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This c

In btu_ble_ll_conn_param_upd_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. T

In GetNextSourceDataPacket of bta_av_co.cc, there is a possible out of bounds read due to a missing bounds check. This c

In btm_ble_read_remote_features_complete of btm_ble_gap.cc, there is a possible out of bounds read due to improper input

In btm_ble_add_resolving_list_entry_complete of btm_ble_privacy.cc, there is a possible out of bounds read due to a miss

In btm_create_conn_cancel_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check.

In btm_vendor_specific_evt of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In multiple functions of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could

In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from th

In Import of C2SurfaceSyncObj.cpp, there is a possible out of bounds write due to a missing bounds check. This could lea

In A2DP_BuildCodecHeaderSbc of a2dp_sbc.cc, there is a possible out of bounds write due to a missing bounds check. This

In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, there is a possible way to learn nearby BT MAC addresses due

In onParentVisible of HeaderPrivacyIconsController.kt, there is a possible way to bypass factory reset protections due t

In add of WifiNetworkSuggestionsManager.java, there is a possible way to trigger permanent DoS due to resource exhaustio

In ffa_mrd_prot of shared_mem.c, there is a possible ID due to a logic error in the code. This could lead to local infor

In OEM_OnRequest of sced.cpp, there is a possible shell command execution due to improper input validation. This could l

In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential navigat

In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to loca

In isBluetoothShareUri of BluetoothOppUtility.java, there is a possible incorrect file read due to a confused deputy. Th

A vulnerability was found in OpenShift Assisted Installer. During generation of the Discovery ISO, image pull secrets we

Rapid7 InsightVM suffers from insufficient session expiration when an administrator performs a security relevant edit on

An issue was discovered in the Linux kernel before 5.8. lib/nlattr.c allows attackers to cause a denial of service (unbo

An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity (XXE) injection

Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object

SourceCodester Loan Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the

An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included uns

Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 9.23.3, the `directus_

Cross Site Scripting vulnerabilty found in IXPManager v.5.6.0 allows attackers to excute arbitrary code via the looking

Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not

Authenticated users were able to enumerate other users' names via the learning plans page.

If the algebra filter was enabled but not functional (eg the necessary binaries were missing from the server), it presen

Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk.

Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only

In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versio

In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is v

A vulnerability, which was classified as critical, was found in Rebuild up to 3.2.3. This affects an unknown part of the

The course participation report required additional checks to prevent roles being displayed which the user did not have

A use-after-free flaw was found in the Linux kernel’s core dump subsystem. This flaw allows a local user to crash the sy

A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This fl

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue c

A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are n