Archive
September 2019
Vulnerabilities first published in this month (UTC), newest first.
1,540 results · Feed
-
Medium 5.4
Dolibarr stored Cross-site Scripting vulnerability
Dolibarr 9.0.5 has stored XSS vulnerability via a User Group Description section to card.php. A user with the "Create/modify other users, groups and permissions" privilege can inject script and can also achieve privilege escalation.
-
Unscored —
In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of…
-
Unscored —
In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds ch…
-
Unscored —
In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of…
-
Unscored —
In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds ch…
-
Unscored —
In Platform, there is a possible bypass of user interaction requirements due to missing permission checks. This could l…
-
Unscored —
In WiFi, the RSSI value and SSID information is broadcast as part of android.net.wifi.RSSI_CHANGE and android.net.wifi.…
-
Unscored —
In the Package Manager service, there is a possible information disclosure due to a confused deputy. This could lead to…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial…
-
Unscored —
In Platform, there is a possible bypass of user interaction requirements due to background app interception. This could…
-
Unscored —
In libttspico, there is a possible OOB write due to a heap buffer overflow. This could lead to remote escalation of pri…
-
Unscored —
In AOSP Email, there is a possible information disclosure due to a confused deputy. This could lead to local disclosure…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of…
-
Unscored —
In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execut…
-
Unscored —
In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial …
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati…
-
Unscored —
In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information d…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information dis…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati…
-
Unscored —
In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote infor…
-
Unscored —
In libhevc, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of serv…
-
Unscored —
In the Screen Lock, there is a possible information disclosure due to an unusual root cause. In certain circumstances, …
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati…
-
Unscored —
In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information d…
-
Unscored —
In libstagefright there is a possible information disclosure due to uninitialized data. This could lead to remote infor…
-
Unscored —
In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information …
-
Unscored —
In the Framework, it is possible to set up BROWSEABLE intents to take over certain URLs. This could lead to remote info…
-
Unscored —
In libSBRdec there is a possible out of bounds read due to incorrect bounds check. This could lead to remote informatio…
-
Unscored —
In libandroidfw, there is a possible OOB read due to an integer overflow. This could lead to local information disclosu…
-
Unscored —
In libstagefright, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote den…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to improper input validation. This could lead to remote inform…
-
Unscored —
In Bluetooth, there is a possible information disclosure due to a use after free. This could lead to local information …
-
Unscored —
In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information d…
-
Unscored —
In notification management of the service manager, there is a possible permissions bypass. This could lead to local esc…
-
Unscored —
In profman, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of pr…
-
High 7.8
Out-of-bounds Write in OpenCV
In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Produ…
-
Unscored —
In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information …
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio…