Archive
10 November 2020
Vulnerabilities first published on this day (UTC), newest first.
59 results · Feed
-
Unscored —
In CellBroadcastReceiver's intent handlers, there is a possible denial of service due to a missing permission check. Th…
-
Unscored —
In btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after free. This could lead t…
-
Unscored —
In the AIBinder_Class constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized dat…
-
Unscored —
In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permissio…
-
Unscored —
In send_vc of res_send.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to…
-
Unscored —CVE-2020-0453 Public exploit
In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent…
-
Unscored —CVE-2020-0452 Public exploit
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could…
-
Unscored —CVE-2020-0451 Public exploit
In sbrDecoder_AssignQmfChannels2SbrChannels of sbrdecoder.cpp, there is a possible out of bounds write due to a heap bu…
-
Unscored —
In Message and toBundle of Notification.java, there is a possible resource exhaustion due to improper input validation.…
-
Unscored —
In rw_i93_sm_format of rw_i93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to …
-
Unscored —CVE-2020-0409 Public exploit
In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local …
-
Unscored —
In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due t…
-
Unscored —CVE-2020-0418 Public exploit
In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege w…
-
Unscored —CVE-2020-0443 Public exploit
In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to lo…
-
Unscored —
In Message and toBundle of Notification.java, there is a possible UI slowdown or crash due to improper input validation…
-
Unscored —CVE-2020-0439 Public exploit
In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permis…
-
Unscored —
Potential segfault in `localtime_r` invocations
### Impact Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowled…
-
High 7.2CVE-2020-16125 Public exploit
gdm3 would start gnome-initial-setup if it cannot contact accountservice
gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a lo…
-
Critical 9.8
Authentication bypass in Apache Airflow
The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and …
KEV Jan 18, 2022