2023

In Activity Manager, there is a possible way to determine whether an app is installed, without query permissions, due to

In Package Manager, there is a possible cross-user settings disclosure due to a missing permission check. This could lea

In Device Policy, there is a possible way to verify if a particular admin app is registered on the device due to side ch

In UsageStatsService, there is a possible way to read installed 3rd party apps due to side channel information disclosur

In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side cha

In ContentService, there is a possible way to determine whether an app is installed, without query permissions, due to s

In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side cha

In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote (proximal/

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

In IntentResolver, there is a possible cross-user media read due to a confused deputy. This could lead to local informat

In Settings, there is a possible way to control private DNS settings from a secondary user due to a permissions bypass.

In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation

In libcore, there is a possible out of bounds read due to a missing bounds check. This could lead to local information d

In Composer, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation o

In Bluetooth, there is a possible way for a paired Bluetooth device to access a long term identifier for an Android devi

In ContentService, there is a possible way to read installed sync content providers due to side channel information disc

In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side cha

In Content Service, there is a possible way to determine whether an app is installed, without query permissions, due to

In Content, here is a possible way to determine whether an app is installed, without query permissions, due to side chan

In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to

In ActivityManagerService, there is a possible way to determine whether an app is installed, without query permissions,

In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to s

In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to

In SEPolicy, there is a possible way to access the factory MAC address due to a permissions bypass. This could lead to l

In Permission, there is a possible way to determine whether an app is installed, without query permissions, due to side

In SliceManagerService, there is a possible way to check if a content provider is installed due to a missing null check.

In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to loc

In PackageManagerNative, there is a possible way to determine whether an app is installed, without query permissions, du

In Usage Stats Service, there is a possible way to determine whether an app is installed, without query permissions due

Adobe Acrobat for Edge version 118.0.2088.46 (and earlier) is affected by a Use After Free vulnerability. An unauthentic

A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models cou

An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local ac

An SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 could allow an attacker with local access a

An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local acce

The Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcpaccordion' shortcod

The Simple Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to

The Shortcode Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'shortmenu' shortcode in versio

The Carousel, Recent Post Slider and Banner Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

The Buzzsprout Podcasting plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'buzzsprout' shortcode i

The FareHarbor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and i

The Grid Plus plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing

The Bellows Accordion Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions

The Giveaways and Contests by RafflePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'raf

Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary

In International Color Consortium DemoIccMAX 79ecb74, CIccXformMatrixTRC::GetCurve in IccCmm.cpp in libSampleICC.a has a

In International Color Consortium DemoIccMAX 79ecb74, CIccCLUT::Interp3d in IccProfLib/IccTagLut.cpp in libSampleICC.a a

Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec.ports[*

Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5.

HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform

Peppermint Ticket Management through 0.2.4 allows remote attackers to read arbitrary files via a /api/v1/ticket/1/file/d