Archive
11 January 2021
Vulnerabilities first published on this day (UTC), newest first.
84 results · Feed
-
Unscored —
In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Unscored —CVE-2021-0313 Public exploit
In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input valid…
-
Unscored —
In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could …
-
Unscored —
In dispatchGraphTerminationMessage() of packages/services/Car/computepipe/runner/graph/StreamSetObserver.cpp, there is …
-
Unscored —
In ElementaryStreamQueue::dequeueAccessUnitH264() of ESQueue.cpp, there is a possible out of bounds write due to a miss…
-
Unscored —
In LazyServiceRegistrar of LazyServiceRegistrar.cpp, there is a possible memory corruption due to a use after free. Thi…
-
Unscored —
In is_device_locked and set_device_locked of keystore_keymaster_enforcement.h, there is a possible bypass of lockscreen…
-
Unscored —CVE-2021-0315 Public exploit
In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to convince the user to grant an app ac…
-
Unscored —CVE-2020-0471 Public exploit
In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetoo…
-
Unscored —CVE-2021-0316 Public exploit
In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This…
-
Unscored —
In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. Th…
-
Unscored —CVE-2021-0318 Public exploit
In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-f…
-
Unscored —CVE-2021-0319 Public exploit
In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth devic…
-
Unscored —
In enforceDumpPermissionForPackage of ActivityManagerService.java, there is a possible way to determine if a package is…
-
Unscored —
In several functions of GlobalScreenshot.java, there is a possible permission bypass due to an unsafe PendingIntent. Th…
-
Unscored —
In onCreate of SlicePermissionActivity.java, there is a possible misleading string displayed due to improper input vali…
-
Unscored —
In onCreate of grantCredentialsPermissionActivity, there is a confused deputy. This could lead to local information dis…
-
Unscored —CVE-2021-0308 Public exploit
In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could l…
-
Unscored —
In updatePermissionSourcePackage of PermissionManagerService.java, there is a possible automatic runtime permission gra…
-
Unscored —CVE-2021-0306 Public exploit
In addAllPermissions of PermissionManagerService.java, there is a possible permissions bypass when upgrading major Andr…
-
High 7.4
CSRF can expose users authentication token in Flask-Security-Too
The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is a independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. In Flask-Security-Too from version 3.3.0 and…
-
Unscored —
In onAuthenticated of AuthenticationClient.java, there is a possible tapjacking attack when requesting the user's finge…
-
Unscored —
In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalat…
-
Unscored —
In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling …
-
Unscored —
Cross-site request forgery (CSRF) in admin/global/manage.php in WDJA CMS 1.5 allows remote attackers to conduct cross-s…
-
Medium 5.9
A denial-of-service vulnerability exists in the traffic-logging functionality of FreyrSCADA IEC-60879-5-104 Server Simu…
-
Medium 5.3
Improper Certificate Validation in node-sass
Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.
-
Medium 5.3
IBM MQ Appliance 9.2 CD and 9.2 LTS is vulnerable to a denial of service, caused by a buffer overflow. A remote attacke…
-
Unscored —
An issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection vulnerability in data_debug.php allows remote au…
-
Unscored —
A stack-based buffer overflow may exist in Delta Electronics CNCSoft ScreenEditor versions 1.01.26 and prior when proce…
-
High 8.8
Cross-Site Request Forgery in ForkCMS
Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Fork before 5.8.3 allows remote attackers to perform unauthorized actions as administrator to (1) approve the mass of the user's comments, (2) restoring a deleted user, (3) ins…
-
Unscored —
In the 3.1.3.64296 and lower version of 360F5, the third party can trigger the device to send a deauth frame by constru…
-
Unscored —
K7TSMngr.exe in K7Computing K7AntiVirus Premium 15.1.0.53 has a Memory Leak.
-
Unscored —
Opera Mini for Android below 53.1 displays URL left-aligned in the address field. This allows a malicious attacker to c…
-
Unscored —
A Buffer Overflow issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53.
-
Unscored —
A Memory Leak issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53.
-
Unscored —
A Memory Leak issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53.
-
Unscored —
A Buffer Overflow issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53.
-
Unscored —
An Incorrect Access Control issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53.
-
Unscored —
An Incorrect Access Control issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53.