2026

In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input v

In multiple locations, there is a possible way to delete media without the MANAGE_EXTERNAL_STORAGE permission due to an

In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confu

In multiple functions of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission due

In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a race condition. This

In validateAddingWindowLw of DisplayPolicy.java, there is a possible way for an app to intercept drag-and-drop events du

In multiple locations, there is a possible lockscreen bypass due to a race condition. This could lead to local escalatio

In multiple locations, there is a possible bypass of a file path filter designed to prevent access to sensitive director

In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check. This could

In multiple functions of btm_ble_sec.cc, there is a possible unencrypted communication due to Invalid error handling. Th

In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to blind

The Master Addons for Elementor Premium plugin for WordPress is vulnerable to Remote Code Execution in all versions up t

sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_supplier.php.

sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_receipt.php.

sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_product.php.

sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_category.php.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TP-Link Deco BE25 v1.0 (

Improper input handling in the administration web interface on TP-Link Deco BE25 v1.0 allows crafted input to be execute

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, rich text cell content rendered via

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, an authenticated user with Creator

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, user-controlled content in comments

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, comments rendered via v-html withou

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the password reset flow did not rev

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the MCP token service did not valid

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, shared view passwords were stored i

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, an authenticated user with Editor r

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the password forgot endpoint return

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, a stored XSS vulnerability exists i

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.5.2-beta3, t

sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_user.php.

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_employee.php.

An issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18_multi. The value of `v1` was not check

An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13

Memory corruption while using alignments for memory allocation.

An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi. The index and mode are controllable

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.5.0 and prio

Memory Corruption when processing invalid user address with nonstandard buffer address.

Memory Corruption when adding user-supplied data without checking available buffer space.

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.

Memory Corruption when accessing trusted execution environment without proper privilege check.

Transient DOS when MAC configures config id greater than supported maximum value.

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.

Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs.

Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.

Memory corruption while handling different IOCTL calls from the user-space simultaneously.

Memory Corruption when accessing buffers with invalid length during TA invocation.