2023

PublicCMS <=V4.0.202302 is vulnerable to Insecure Permissions.

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to version 1.13.4, when

RedTeam Pentesting discovered that the web interface of STARFACE as well as its REST API allows authentication using the

In the PrestaShop < 2.4.3 module "Length, weight or volume sell" (ailinear) there is a SQL injection vulnerability.

The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is unini

A memory leak in the EFR32 Bluetooth LE stack 5.1.0 through 5.1.1 allows an attacker to send an invalid pairing message

Buffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or earlier allows connected de

Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabi

Adobe Animate versions 22.0.9 (and earlier) and 23.0.1 (and earlier) are affected by a Use After Free vulnerability that

Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a URL Redirection to Untrusted Site ('Open Redir

Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabi

Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerabi

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Imprope

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorr

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorr

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Busines

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Improp

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Server-

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Server-

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorr

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an XML In

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorr

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Inform

Some access control products are vulnerable to a session hijacking attack because the product does not update the sessio

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorr

Adobe Substance 3D Designer version 12.4.1 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability

In doInBackground of NotificationContentInflater.java, there is a possible temporary denial or service due to long runni

In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input valid

In multiple files, there is a possible way to access traces in the dev mode due to a permissions bypass. This could lead

In several functions of several files, there is a possible way to access developer mode traces due to a permissions bypa

In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. Th

In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input valid

In several methods of JobStore.java, uncaught exceptions in job map parsing could lead to local persistent denial of ser

In multiple functions of JobStore.java, there is a possible way to cause a crash on startup due to improper input valida

In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to imp

In checkKeyIntentParceledCorrectly() of ActivityManagerService.java, there is a possible bypass of Parcel Mismatch mitig

In btm_ble_periodic_adv_sync_lost of btm_ble_gap.cc, there is a possible remote code execution due to a buffer overflow.

In getFullScreenIntentDecision of NotificationInterruptStateProviderImpl.java, there is a possible activity launch while

In various functions of AppStandbyController.java, there is a possible way to break manageability scenarios due to a log

In readSampleData of NuMediaExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could

In bindOutputSwitcherAndBroadcastButton of MediaControlPanel.java, there is a possible launch arbitrary activity under S

In run of multiple files, there is a possible escalation of privilege due to unsafe deserialization. This could lead to

In multiple functions of multiple files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction f

In various functions of various files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for

In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connect

In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking. This could lead to

In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type due to improperly used c

In sdpu_build_uuid_seq of sdp_discovery.cc, there is a possible out of bounds write due to a use after free. This could

In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. This

In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to