2023

BigBlueButton is an open-source virtual classroom. Prior to versions 2.6.11 and 2.7.0-beta.3, Guest Lobby was vulnerable

A stored XSS in the process overview (bersicht zugewiesener Vorgaenge) in mbsupport openVIVA c2 20220101 allows a remote

A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial

baserCMS is a website development framework. Prior to version 4.8.0, there is a cross site request forgery vulnerability

baserCMS is a website development framework. Prior to version 4.8.0, there is a Directory Traversal Vulnerability in the

baserCMS is a website development framework. Prior to version 4.8.0, there is a cross-site scripting vulnerability in th

BigBlueButton is an open-source virtual classroom. BigBlueButton prior to version 2.6.0-beta.2 is vulnerable to unrestri

In collapse of canonicalize_md.c, there is a possible out of bounds read due to a missing bounds check. This could lead

In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disc

In registerPhoneAccount of TelecomServiceImpl.java, there is a possible way to reveal images from another user due to a

In User Backup Manager, there is a possible way to leak a token to bypass user confirmation for backup due to log inform

In Whitechapel, there is a possible out of bounds read due to memory corruption. This could lead to local information di

In Package Manager, there is a possible possible permissions bypass due to an unsafe PendingIntent. This could lead to l

In Settings, there is a possible way for the user to unintentionally send extra data due to an unclear prompt. This coul

In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to

In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

In SELinux Policy, there is a possible restriction bypass due to a permissions bypass. This could lead to local informat

In Telephony, there is a possible way to retrieve the ICCID due to a logic error in the code. This could lead to local i

NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authoriz

In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the X

In Secure Element, there is a possible out of bounds write due to an integer overflow. This could lead to local escalati

In the Security Element API, there is a possible out of bounds write due to an integer overflow. This could lead to loca

In Usage Access, there is a possible way to display a Settings usage access restriction toggle screen due to a permissio

In Audio, there is a possible out of bounds read due to missing bounds check. This could lead to local information discl

In Scudo, there is a possible way to exploit certain heap OOB read/write issues due to an insecure implementation/design

In Scudo, there is a possible way for an attacker to predict heap allocation patterns due to insecure implementation/des

In Contacts, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service in th

In ContactsProvider, there is a possible crash loop due to resource exhaustion. This could lead to local persistent deni

In Usage, there is a possible permanent DoS due to resource exhaustion. This could lead to local denial of service with

In Bluetooth, there is a possible out of bounds write due to improper input validation. This could lead to local escalat

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In Package Manager Service, there is a possible way to determine whether an app is installed, without query permissions,

In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In Media Projection, there is a possible way to determine whether an app is installed, without query permissions, due to

In Job Scheduler, there is a possible way to determine whether an app is installed, without query permissions, due to si

In Telecomm, there is a possible way to get the call state due to a missing permission check. This could lead to local i

In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to sid

In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to sid

In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side ch

In App Ops Service, there is a possible disclosure of information about installed packages due to a logic error in the c

In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to si

In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to si

In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to side

In Overlay Manager, there is a possible way to determine whether an app is installed, without query permissions, due to

In Activity Manager, there is a possible way to determine whether an app is installed due to a missing permission check.

In Permission Manager, there is a possible way to determine whether an app is installed, without query permissions, due

In Package Manager Service, there is a possible way to determine whether an app is installed, without query permissions,

In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side ch