Archive
September 2020
Vulnerabilities first published in this month (UTC), newest first.
2,205 results · Feed
-
Unscored —
In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information dis…
-
Unscored —
In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local informa…
-
Unscored —
In libhwbinder, there is a possible information disclosure due to uninitialized data. This could lead to local informat…
-
Unscored —
In Android Auto Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to loca…
-
Unscored —
In Telephony, there are possible leaks of sensitive data due to missing permission checks. This could lead to local inf…
-
Unscored —
In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to …
-
Unscored —
In NetworkStackNotifier, there is a possible permissions bypass due to an unsafe implicit PendingIntent. This could lea…
-
Unscored —
In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Unscored —
In iptables, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat…
-
Unscored —
In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Unscored —
In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Unscored —
In NFC, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privi…
-
Unscored —
In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Unscored —
In the Bluetooth server, there is a possible out of bounds write due to an integer overflow. This could lead to local e…
-
Unscored —
In Bluetooth, there is a possible spoofing of bluetooth device metadata due to a missing permission check. This could l…
-
Unscored —
In Bluetooth, there is a possible control over Bluetooth enabled state due to a missing permission check. This could le…
-
Unscored —
In hwservicemanager, there is a possible out of bounds write due to freeing a wild pointer. This could lead to local es…
-
Unscored —
In the Settings app, there is an insecure default value. This could lead to local escalation of privilege and tapjackin…
-
Unscored —
In NFC, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege wi…
-
Unscored —
In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. This could lead to lo…
-
Medium 5.8
Code Injection in Rapid7 AppSpider Pro Installer
In AppSpider installer versions prior to 7.2.126, the AppSpider installer calls an executable which can be placed in the appropriate directory by an attacker with access to the local machine. This would prevent the installer from distinguishing between a vali…
-
Unscored —
In the audio server, there is a missing permission check. This could lead to local escalation of privilege regarding au…
-
Unscored —
In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code exe…
-
Unscored —
In the System UI, there is a possible system crash due to an uncaught exception. This could lead to local permanent den…
-
Unscored —
NVIDIA GeForce NOW, versions prior to 2.0.23 on Windows and macOS, contains a vulnerability in the desktop application …
-
Unscored —
An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files al…
-
Medium 6.1
Adobe Media Encoder PSD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locat…
-
Medium 6.1
Adobe Media Encoder WMV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locat…
-
Medium 6.1
Adobe Media Encoder FLV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locat…
-
Unscored —
An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-onl…
-
Unscored —
An issue was discovered in Gradle Enterprise before 2020.2.5. The cookie used to convey the CSRF prevention token is no…
-
Unscored —
An issue was discovered in Gradle Enterprise 2018.5. An attacker can potentially make repeated attempts to guess a loca…
-
Unscored —
An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. Cross-site transmission…
-
Unscored —
An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. When configuring Gradle Enterprise to integrate with a …
-
Unscored —
An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. An attacker with physical access to the browser of a us…
-
Unscored —
An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4. The /usage page of Gradle Enterprise conveys high level…
-
Unscored —
An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4. The CSRF prevention token is stored in a request cookie…
-
Unscored —
An issue was discovered in Gradle Enterprise 2017.3 - 2020.2.4 and Gradle Enterprise Build Cache Node 1.0 - 9.2. Unrest…
-
Unscored —
An issue was discovered in Gradle Enterprise 2020.2 - 2020.2.4. An XSS issue exists via the request URL.
-
Unscored —
UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website…