Archive
June 2020
Vulnerabilities first published in this month (UTC), newest first.
1,813 results · Feed
-
Medium 4.3
The Rolling Proximity Identifier used in the Apple/Google Exposure Notification API beta through 2020-05-29 enables att…
-
High 8.1
Jackson Configuration Allows Code Execution with Unknown "Serialization Gadgets"
When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deserialization gadgets". Spring Batch configures Jackson with glo…
-
Unscored —
Mids' Reborn Hero Designer 2.6.0.7 downloads the update manifest, as well as update files, over cleartext HTTP. Additio…
-
Unscored —
Mids' Reborn Hero Designer 2.6.0.7 has an elevation of privilege vulnerability due to default and insecure permissions …
-
Unscored —
In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. Thi…
-
Unscored —
In ce_t4t_process_select_file_cmd of ce_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check…
-
Unscored —
In avdt_msg_prs_rej of avdt_msg.cc, there is a possible out-of-bounds read due to improper input validation. This could…
-
Unscored —
In RegisterNotificationResponse::GetEvent of register_notification_packet.cc, there is a possible abort due to improper…
-
Unscored —
In getAllConfigFlags of SettingsProvider.cpp, there is a possible illegal read due to a missing permission check. This …
-
Unscored —
In the settings app, there is a possible app crash due to improper input validation. This could lead to local denial of…
-
Unscored —
In main of main.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation o…
-
Unscored —
In phNxpNciHal_write_ext of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. …
-
Unscored —
In btu_hcif_pin_code_request_evt, btu_hcif_link_key_request_evt, and btu_hcif_link_key_notification_evt of btu_hcif.cc,…
-
Unscored —
In hal_fd_init of hal_fd.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead …
-
Unscored —
In connect() of PanService.java, there is a possible permissions bypass. This could lead to local escalation of privile…
-
Unscored —
In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use co…
-
Unscored —CVE-2020-0201 Public exploit
In showSecurityFields of WifiConfigController.java there is a possible credential leak due to a confused deputy. This c…
-
Unscored —
In rw_mfc_writeBlock of rw_mfc.cc, there is a possible out of bounds read due to an incorrect bounds check. This could …
-
Unscored —
In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds read due to a missing b…
-
Unscored —
In btm_simple_pair_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This c…
-
Unscored —CVE-2020-0219 Public exploit
In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of…
-
Unscored —
In NxpNfc::ioctl of NxpNfc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead t…
-
Unscored —
In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds write due to a missing …
-
Unscored —
In btu_hcif_hardware_error_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. Th…
-
Unscored —CVE-2020-0215 Public exploit
In onCreate of ConfirmConnectActivity.java, there is a possible leak of Bluetooth information due to a permissions bypa…
-
Unscored —
In NDEF_MsgValidate of ndef_utils.c, there is a possible out of bounds read due to an integer overflow. This could lead…
-
Unscored —
In nfa_dm_ndef_find_next_handler of nfa_dm_ndef.c, there is a possible out of bounds read due to a missing bounds check…
-
Unscored —
In btu_hcif_mode_change_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This …
-
Unscored —
In btm_proc_sp_req_evt of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could …
-
Unscored —
In rw_t3t_message_set_block_list of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. T…
-
Unscored —CVE-2020-0188 Public exploit
In onCreatePermissionRequest of SettingsSliceProvider.java, there is a possible permissions bypass due to a PendingInte…
-
Unscored —
In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow.…
-
Unscored —CVE-2020-0183 Public exploit
In handleMessage of BluetoothManagerService, there is an incomplete reset. This could lead to local escalation of privi…
-
Unscored —
In btu_hcif_esco_connection_chg_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds chec…
-
Unscored —CVE-2020-0155 Public exploit
In phNxpNciHal_send_ese_hal_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds …
-
Unscored —
In nfc_ncif_proc_t3t_polling_ntf of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. …
-
Unscored —
In rw_i93_sm_format of rw_i93.c, there is a possible information disclosure due to a missing bounds check. This could l…
-
Unscored —
In rw_i93_sm_detect_ndef of rw_i93.c, there is a possible information disclosure due to a missing bounds check. This co…
-
Unscored —
In onHandleIntent of TraceService.java, there is a possible bypass of developer settings requirements for capturing sys…
-
Unscored —
In nfa_hci_conn_cback of nfa_hci_main.cc, there is a possible out of bounds read due to a missing bounds check. This co…