2021

In vorbis_book_decodev_set of codebook.c, there is a possible out of bounds write due to a missing bounds check. This co

In code generated by BuildParcelFields of generate_cpp.cpp, there is a possible way for a crafted parcelable to reveal u

In AndroidManifest.xml of Settings, there is a possible pairing of a Bluetooth device without user's consent due to a mi

In C2SoftMP3::process() of C2SoftMp3Dec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This

In onCreate of KeyChainActivity.java, there is a possible way to use an app certificate stored in keychain due to a tapj

In quota_proc_write of xt_quota2.c, there is a possible way to read kernel memory due to uninitialized data. This could

In update of km_compat.cpp, there is a possible loss of potentially sensitive data due to a logic error in the code. Thi

In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect

In pf_write_buf of FuseDaemon.cpp, there is possible memory corruption due to a race condition. This could lead to local

In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to

In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmar

In doCropPhoto of PhotoSelectionHandler.java, there is a possible permission bypass due to a confused deputy. This could

In onCreate of CompanionDeviceActivity.java or DeviceChooserActivity.java, there is a possible way for HTML tags to inte

In showNotification of NavigationModeController.java, there is a possible confused deputy due to an unsafe PendingIntent

In getAlias of BluetoothDevice.java, there is a possible way to create misleading permission dialogs due to missing data

In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds ch

In ion_dma_buf_end_cpu_access and related functions of ion.c, there is a possible way to corrupt memory due to a use aft

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due t

In requestChannelBrowsable of TvInputManagerService.java, there is a possible permission bypass due to a logic error in

In onCreate of NfcImportVCardActivity.java, there is a possible way to add a contact without user's consent due to a mis

In rw_t4t_sm_detect_ndef of rw_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This cou

In xhci_vendor_get_ops of xhci.c, there is a possible out of bounds read due to a missing bounds check. This could lead

In createOrUpdate of Permission.java, there is a possible way to gain internal permissions due to a missing permission c

In enforceCrossUserOrProfilePermission of PackageManagerService.java, there is a possible bypass of INTERACT_ACROSS_PROF

In ParsingPackageImpl of ParsingPackageImpl.java, there is a possible parcel serialization/deserialization mismatch due

In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to loca

In getService of IServiceManager.cpp, there is a possible unhandled exception due to an integer overflow. This could lea

In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This

In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escala

In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow. This could lead to

In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local

In onCreate of AllowBindAppWidgetActivity.java, there is a possible bypass of user interaction requirements due to uncle

In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible wa

In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local esca

In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier d

In WT_InterpolateNoLoop of eas_wtengine.c, there is a possible out of bounds read due to an incorrect bounds check. This

In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. This could lead to loc

In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth devi

A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php.

Online Pre-owned/Used Car Showroom Management System 1.0 contains a SQL injection authentication bypass vulnerability. A

Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel auth

Lychee-v3 3.2.16 is affected by a Cross Site Scripting (XSS) vulnerability in php/Access/Guest.php. The function exit wi

yetiforcecrm is vulnerable to Business Logic Errors

In StackStorm versions prior to 3.6.0, the jinja interpreter was not run in sandbox mode and thus allows execution of un

Visual Studio Code Spoofing Vulnerability

Visual Studio Code WSL Extension Remote Code Execution Vulnerability

Microsoft Office app Remote Code Execution Vulnerability

Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability

Microsoft PowerShell Spoofing Vulnerability

Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability