2023

In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could l

In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to bypass factory reset protection due to inc

In A2DP_BuildCodecHeaderSbc of a2dp_sbc.cc, there is a possible out of bounds write due to a missing bounds check. This

In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. Thi

In getGroupState of GrantPermissionsViewModel.kt, there is a possible way to keep a one-time permission granted due to a

In bta_av_rc_disc_done of bta_av_act.cc, there is a possible out of bounds write due to a missing bounds check. This cou

In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a possible out of bounds write due to a heap buffer overflow. Thi

In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, there is a possible way to learn nearby BT MAC addresses due

In onParentVisible of HeaderPrivacyIconsController.kt, there is a possible way to bypass factory reset protections due t

In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the

In addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due t

In add of WifiNetworkSuggestionsManager.java, there is a possible way to trigger permanent DoS due to resource exhaustio

In onPackageAddedInternal of PermissionManagerService.java, there is a possible way to silently grant a permission after

In ffa_mrd_prot of shared_mem.c, there is a possible ID due to a logic error in the code. This could lead to local infor

In OEM_OnRequest of sced.cpp, there is a possible shell command execution due to improper input validation. This could l

In sms_SendMmCpErrMsg of sms_MmConManagement.c, there is a possible out of bounds write due to a heap buffer overflow. T

In Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to re

In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential navigat

In parseParamsBlob of types.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead

In parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow. Thi

In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to loca

In isBluetoothShareUri of BluetoothOppUtility.java, there is a possible incorrect file read due to a confused deputy. Th

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in

A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in

A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The

A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The

A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in

A vulnerability was found in OpenShift Assisted Installer. During generation of the Discovery ISO, image pull secrets we

A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the

Rapid7 InsightVM suffers from insufficient session expiration when an administrator performs a security relevant edit on

An issue was discovered in the Linux kernel before 5.8. lib/nlattr.c allows attackers to cause a denial of service (unbo

An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity (XXE) injection

Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments. Several URI Schemes ar

Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead t

Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.

Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.

Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebW

SourceCodester Loan Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the

A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2. It has been classified as problematic. Affected is an unknow

An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included uns

Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via

Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Resizable ArrayBuffers passed to asyn

Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 9.23.3, the `directus_

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. Pri

smartCARS 3 is flight tracking software. In version 0.5.8 and prior, all persons who have failed login attempts will hav

PrestaShop jmsblog 2.5.5 was discovered to contain a SQL injection vulnerability.