2023

The Superb slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions

The Message ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and

The Left right image slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in

The Jquery news ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to,

The Information Reel plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, a

The Image vertical reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode

The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcod

SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker

JHipster generator-jhipster before 2.23.0 allows a timing attack against validateToken due to a string comparison that s

An issue in the component SuperUserSetuserModuleFrontController:init() of idnovate superuser before v2.4.2 allows attack

NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise,

An issue in minCal v.1.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the customer_data

Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, an unsafe deserialization vulnerabilit

Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, the `config/save` and `config/set` end

CloudExplorer Lite is an open source, lightweight cloud management platform. Prior to version 1.4.1, the gateway filter

An issue discovered in Govee LED Strip v3.00.42 allows attackers to cause a denial of service via crafted Move and MoveW

Cross Site Request Forgery (CSRF) vulnerability in DouHaocms v.3.3 allows a remote attacker to execute arbitrary code vi

tinyfiledialogs (aka tiny file dialogs) before 3.8.0 allows shell metacharacters in titles, messages, and other input da

The installer (aka openvpn-client-installer) in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalati

In Print Service, there is a possible background activity launch due to a logic error in the code. This could lead to lo

In sdksandbox, there is a possible strandhogg style overlay attack due to a logic error in the code. This could lead to

In Setup Wizard, there is a possible way to save a WiFi network due to an insecure default value. This could lead to loc

In Activity Manager, there is a possible background activity launch due to a logic error in the code. This could lead to

In Settings, there is a possible way for the user to change SIM due to a missing permission check. This could lead to lo

In Bluetooth, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of

In Messaging, there is a possible way to disable the messaging application due to improper input validation. This could

In Sim, there is a possible way to evade mobile preference restrictions due to a permission bypass. This could lead to l

In Settings, there is a possible bypass of profile owner restrictions due to a missing permission check. This could lead

In Settings, there is a possible restriction bypass due to a missing permission check. This could lead to local escalati

In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to

In Telecomm, there is a possible way to silence the ring for calls of secondary users due to a missing permission check.

In Sysproxy, there is a possible out of bounds write due to an integer underflow. This could lead to local escalation of

In System UI, there is a possible factory reset protection bypass due to a logic error in the code. This could lead to l

In Telephony, there is a possible way for a guest user to change the preferred SIM due to a missing permission check. Th

In libdexfile, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation

In Bluetooth, there is a possibility of code-execution due to a use after free. This could lead to paired device escalat

In UWB Google, there is a possible way for a malicious app to masquerade as system app com.android.uwb.resources due to

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal

In libaudioclient, there is a possible out of bounds write due to a use after free. This could lead to local escalation

In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disc

In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informatio

In ActivityStarter, there is a possible background activity launch due to an unsafe PendingIntent. This could lead to lo

In RemoteSpeechRecognitionService of RemoteSpeechRecognitionService.java, there is a possible way to launch an activity

In Permission Manager, there is a possible way to bypass required permissions due to a missing permission check. This co

In Minikin, there is a possible way to trigger ANR by showing a malicious message due to resource exhaustion. This could

In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to side

In Package Installer, there is a possible way to determine whether an app is installed, without query permissions, due t

In Package Installer, there is a possible way to determine whether an app is installed, without query permissions, due t

In Core, there is a possible way to forward calls without user knowledge due to a missing permission check. This could l