2023

A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Ke

The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmwar

A data race flaw was found in the Linux kernel, between where con is allocated and con->sock is set. This issue leads to

Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are report

When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that passw

Qihoo 360 (https://www.360.cn/) Qihoo 360 Safeguard (https://www.360.cn/) Qihoo 360 Total Security (http://www.360totals

Buffer Overflow vulnerability in Qihoo 360 Chrome v13.0.2170.0 allows attacker to escalate priveleges.

Buffer Overflow vulnerability in Qihoo 360 Total Security v10.8.0.1060 and v10.8.0.1213 allows attacker to escalate priv

Qihoo 360 (https://www.360.cn/) Qihoo 360 Safeguard (https://www.360.cn/) Qihoo 360 Chrome (https://browser.360.cn/ee/)

Buffer Overflow vulnerability in Qihoo 360 Safe guard v12.1.0.1004, v12.1.0.1005, v13.1.0.1001 allows attacker to escala

Buffer Overflow vulnerability in Qihoo 360 Safe Browser v13.0.2170.0 allows attacker to escalate priveleges.

Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficie

A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-componen

Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with

A permission misconfiguration in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow an user to hijack VP

A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a mali

In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local

In multiple methods of PackageInstallerSession.java, there is a possible way to start foreground services from the backg

In multiple functions of AccountManagerService.java, there is a possible loading of arbitrary code into the System Setti

In toUriInner of Intent.java, there is a possible way to launch an arbitrary activity due to a confused deputy. This cou

In OnWakelockReleased of attribution_processor.cc, there is a use after free that could lead to remote code execution wi

In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the display content due

In extractRelativePath of FileUtils.java, there is a possible way to access files in a directory belonging to other appl

In retrieveServiceLocked of ActiveServices.java, there is a possible way to dynamically register a BroadcastReceiver usi

In canDisplayLocalUi of AppLocalePickerActivity.java, there is a possible way to change system app locales due to a miss

In parseUsesPermission of ParsingPackageUtils.java, there is a possible boot loop due to resource exhaustion. This could

In startInstrumentation of ActivityManagerService.java, there is a possible way to keep the foreground service alive whi

In deliverOnFlushComplete of LocationProviderManager.java, there is a possible way to bypass background activity launch

In PreferencesHelper.java, an uncaught exception may cause the device to get stuck in a boot loop. This could lead to lo

In isToggleable of SecureNfcEnabler.java and SecureNfcPreferenceController.java, there is a possible way to enable NFC f

In nci_snd_set_routing_cmd of nci_hmsgs.cc, there is a possible out of bounds write due to a missing bounds check. This

In buildPropFile of filesystem.go, there is a possible insecure hash due to an improperly used crypto. This could lead t

In onNullBinding of CallScreeningServiceHelper.java, there is a possible way to record audio without showing a privacy i

In getNumberFromCallIntent of NewOutgoingCallIntentBroadcaster.java, there is a possible way to enumerate other user's c

In multiple functions of PackageInstallerService.java and related files, there is a possible way to bypass background ac

In register_notification_rsp of btif_rc.cc, there is a possible out of bounds read due to a missing bounds check. This c

In avdt_scb_hdl_pkt_no_frag of avdt_scb_act.cc, there is a possible out of bounds write due to an incorrect bounds check

In AlarmManagerActivity of AlarmManagerActivity.java, there is a possible way to bypass background activity launch restr

In acc_ctrlrequest_composite of f_accessory.c, there is a possible out of bounds write due to a missing bounds check. Th

In deserialize of multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead

In multiple functions of RunningTasks.java, there is a possible privilege escalation due to a missing privilege check. T

In Spring Security, versions 5.7.x prior to 5.7.8, versions 5.8.x prior to 5.8.3, and versions 6.0.x prior to 6.0.3, the

In PVRSRVBridgeSyncPrimOpTake of the PowerVR kernel driver, a missing size check means there is a possible integer overf

In PVRSRVBridgePhysmemImportSparseDmaBuf of the PowerVR kernel driver, a missing size check means there is a possible in

In PVRSRVBridgeCacheOpQueue of the PowerVR kernel driver, a missing size check means there is a possible integer overflo

In PVRSRVBridgeRGXKickSync of the PowerVR kernel driver, a missing size check means there is a possible integer overflow

In PVRSRVBridgeRGXKickCDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow

In PVRSRVBridgeRGXKickTA3D of the PowerVR kernel driver, a missing size check means there is a possible integer overflow

In PVRSRVBridgeRGXTDMSubmitTransfer of the PowerVR kernel driver, a missing size check means there is a possible integer

In PVRSRVBridgeServerSyncGetStatus of the PowerVR kernel driver, a missing size check means there is a possible integer