2025

In isValidMediaUri of SettingsProvider.java, there is a possible cross user media read due to a missing permission check

In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to lo

A vulnerability was found in Jihai Jshop MiniProgram Mall System 2.9.0. Affected by this issue is some unknown functiona

A lack of file name validation or verification in the Attachment service of usememos memos v0.25.2 allows attackers to e

Incorrect access control in the Identity Provider service of usememos memos v0.25.2 allows attackers with low-level priv

A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patche

In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisio

In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhausti

In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead

In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to

In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode due

In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible configuration data leak due to a logic error in

In multiple locations, there is a possible way to create a large amount of app ops due to a logic error in the code. Thi

In multiple locations, there is a possible way to read files from another user due to a missing permission check. This c

In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion.

In multiple locations, there is a possible permanent denial of service due to improper input validation. This could lead

In multiple files, there is a possible way to reveal information across users due to a missing permission check. This co

In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy

In multiple locations, there is a possible way to read files from another user due to a missing permission check. This c

In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency

In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limi

In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permanen

In ensureBound of RemotePrintService.java, there is a possible way for a background app to keep foreground permissions d

In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input valid

Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily modify or d

Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily delete reac

A vulnerability was determined in code-projects Simple Shopping Cart 1.0. This issue affects some unknown processing of

A vulnerability was found in code-projects Simple Shopping Cart 1.0. This vulnerability affects unknown code of the file

A vulnerability was detected in code-projects Daily Time Recording System 4.5.0. The impacted element is an unknown func

A security vulnerability has been detected in SourceCodester Inventory Management System 1.0. The affected element is an

FULLBACK Manager Pro provided by GS Yuasa International Ltd. registers two Windows services with unquoted file paths. A

A wrong permission check in KNIME Business Hub before version 1.17.0 allowed an authenticated user to save jobs of other

A security flaw has been discovered in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. This i

A vulnerability was determined in D-Link DCS-930L 1.15.04. This affects an unknown part of the file /setSystemAdmin of t

App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerabi

Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability

Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability

Permission control vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may

Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the servic

A vulnerability was found in Yottamaster DM2, DM3 and DM200 up to 1.2.23/1.9.12. Affected by this issue is some unknown

Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect avail

Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerabi

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulner

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulner

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulner

Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attack

Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attack

Vitals ESP developed by Galaxy Software Services has an Arbitrary File Read vulnerability, allowing privileged remote at

A flaw has been found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the fi

A security vulnerability has been detected in ORICO CD3510 1.9.12. This affects an unknown function of the component Fil