2023

In notification access permission dialog box, malicious application can embedded a very long service label that overflow

In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds c

In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to lo

there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with S

Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-S

In multiple functions of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could l

there is a possible way to bypass cryptographic assurances due to a logic error in the code. This could lead to local es

In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy

In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile

In SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities via Settings due to a logic err

In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to loc

In getCurrentState of OneTimePermissionUserManager.java, there is a possible way to hold one-time permissions after the

In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper in

In gatt_end_operation of gatt_utils.cc, there is a possible out of bounds write due to a missing bounds check. This coul

In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a p

In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device

In getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a possible way to bypass a de

In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to

In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the loc

In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config file

In rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer overflow. This could lea

In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of s

In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused d

In visitUris of RemoteViews.java, there is a possible leak of images between users due to a confused deputy. This could

In updatePictureInPictureMode of ActivityRecord.java, there is a possible bypass of background launch restrictions due t

In openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying the microphone privacy

In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused dep

The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space

The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users

The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal. As

The Syncfusion EJ2 Node File Provider 0102271 is vulnerable to filesystem-server.js directory traversal. As a result, an

GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to deni

A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. Th

A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown par

A vulnerability was found in GZ Scripts Vacation Rental Website 1.8 and classified as problematic. Affected by this issu

A vulnerability has been found in khodakhah NodCMS 3.4.1 and classified as problematic. Affected by this vulnerability i

A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privil

Online Piggery Management System 1.0 is vulnerable to Cross Site Scripting (XSS). An unauthenticated user can POST JavaS

Online Piggery Management System 1.0 is vulnerable to File Upload. An unauthenticated user can upload a php file by send

Online Piggery Management System 1.0 is vulnerable to SQL Injection.

A missing permission check in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers with Overall/Read permissi

A cross-site request forgery (CSRF) vulnerability in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers to

A missing permission check in Jenkins Benchmark Evaluator Plugin 1.0.1 and earlier allows attackers with Overall/Read pe

A cross-site request forgery (CSRF) vulnerability in Jenkins Benchmark Evaluator Plugin 1.0.1 and earlier allows attacke

A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Auth Plugin 1.14 and earlier allows attackers to t

Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with

A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read pe

A cross-site request forgery (CSRF) vulnerability in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attacke

A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline restFul API Plugin 0.11 and earlier allows attacke

A missing permission check in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers with Overall/Re