2025

In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy

In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay a

In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to lo

In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges a

In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could l

In multiple locations, there is a possible way to read files from another user due to a missing permission check. This c

In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency

In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due

In startAlwaysOnVpn of Vpn.java, there is a possible way to disable always-on VPN due to a logic error in the code. This

In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to

In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limi

In multiple functions of BaseBundle.java, there is a possible way to execute arbitrary code due to a logic error in the

In connectInternal of MediaBrowser.java, there is a possible way to access while in use permission while the app is in b

In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permanen

In multiple functions of CertInstaller.java, there is a possible way to install certificates due to a permissions bypass

In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in

In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. Thi

In multiple locations, there is a possible bypass of user profile boundary with a forwarded intent due to improper input

In multiple locations, there is a possible way to bypass the cross profile intent filter due to a logic error in the cod

In multiple locations, there is a possible intent filter bypass due to a race condition. This could lead to local escala

In multiple functions of NotificationStation.java, there is a possible cross-profile information disclosure due to a con

In grantAllowlistedPackagePermissions of SettingsSliceProvider.java, there is a possible way for a third party app to mo

In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications wh

In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the devic

In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the devic

In ensureBound of RemotePrintService.java, there is a possible way for a background app to keep foreground permissions d

In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input valid

In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy. This c

A flaw has been found in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /newrec

A vulnerability was detected in itsourcecode Student Management System 1.0. This impacts an unknown function of the file

Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily modify or d

Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily delete reac

Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability. This vulnerability stems from the admin/template.php comp

A security vulnerability has been detected in code-projects Online Ordering System 1.0. This affects an unknown function

A weakness has been identified in code-projects Online Ordering System 1.0. The impacted element is an unknown function

phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export functionality. The gene

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown func

A vulnerability was identified in code-projects Simple Shopping Cart 1.0. Impacted is an unknown function of the file /a

A vulnerability was determined in code-projects Simple Shopping Cart 1.0. This issue affects some unknown processing of

A vulnerability was found in code-projects Simple Shopping Cart 1.0. This vulnerability affects unknown code of the file

In affected versions, vulnerability-lookup handled user-controlled content in comments and bundles in an unsafe way, wh

Some endpoints in vulnerability-lookup that modified application state (e.g. changing database entries, user data, con

A vulnerability has been found in IdeaCMS up to 1.8. This affects the function whereRaw of the file app/common/logic/ind

In affected versions, vulnerability-lookup did not track or limit failed One-Time Password (OTP) attempts during Two-Fa

A flaw has been found in GreenCMS 2.3.0603. Affected by this issue is some unknown functionality of the file /Admin/Cont

A vulnerability was detected in code-projects Daily Time Recording System 4.5.0. The impacted element is an unknown func

A security vulnerability has been detected in SourceCodester Inventory Management System 1.0. The affected element is an

A weakness has been identified in Yealink SIP-T21P E2 52.84.0.15. Impacted is an unknown function of the component Local

FULLBACK Manager Pro provided by GS Yuasa International Ltd. registers two Windows services with unquoted file paths. A

Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary comm