2024

In valid_address of syscall.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead

In vring_init of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to a logic e

there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure wi

In lwis_allocator_free of lwis_allocator.c, there is a possible memory corruption due to a use after free. This could le

Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-329163861.

Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-315191818.

In TrustySharedMemoryManager::GetSharedMemory of ondevice/trusty/trusty_shared_memory_manager.cc, there is a possible ou

In ffu_flash_pack of ffu.c, there is a possible out of bounds read due to an integer overflow. This could lead to local

In sm_mem_compat_get_vmm_obj of lib/sm/shared_mem.c, there is a possible arbitrary physical memory access due to imprope

In gsc_gsa_rescue of gsc_gsa.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead

In ppmp_protect_buf of drm_fw.c, there is a possible information disclosure due to a logic error in the code. This could

In vring_size of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to an intege

there is a possible man-in-the-middle attack due to a logic error in the code. This could lead to remote escalation of p

Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-331255656.

In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. T

Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488.

In ProtocolEmbmsSaiListAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a miss

In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible out of bounds read due to a buffer overflow. This

In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free. This could lead t

there is a possible privilege escalation due to an insecure default value. This could lead to local escalation of privil

In ProtocolMiscHwConfigChangeAdapter::GetData() of protocolmiscadapter.cpp, there is a possible out-of-bounds read due t

Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-330537292.

In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible arbitrary write due to uninitialized data. This c

In mm_GetMobileIdIndexForNsUpdate of mm_GmmPduCodec.c, there is a possible out of bounds write due to an incorrect bound

there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote d

Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545.

There is a possible Local bypass of user interaction due to an insecure default value. This could lead to local informat

In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free.

A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. This issue affects the function actionPassDe

A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects the function a

The Shoutcast Icecast HTML5 Radio Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi

The Beek Widget Extention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions u

The Simple News plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'news' shortcode in a

The File Upload Types by WPForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads

The WPS Telegram Chat plugin for WordPress is vulnerable to authorization bypass due to a missing capability check when

The WPS Telegram Chat plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a

The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versio

N-LINE 2.0.6 and prior versions contain a code injection vulnerability. If this vulnerability is exploited, arbitrary co

MUSASI version 3 contains an issue with use of client-side authentication. If this vulnerability is exploited, other use

The League of Legends Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in ver

The League of Legends Shortcodes plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versi

The Bamazoo – Button Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's dgs sh

The 10Web Social Post Feed plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_qu

The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to privilege escalat

The Mapster WP Maps plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege e

Whale browser Installer before 3.1.0.0 allows an attacker to execute a malicious DLL in the user environment due to impr

Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scr

Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scr

Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of uninte

Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulner