Skip to content
OpenAdvisories

Archive

10 February 2021

Vulnerabilities first published on this day (UTC), newest first.

18 results · Clear filters · Feed

  • Unscored —
    CVE-2021-27177 Public exploit EPSS 20%

    An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending…

  • Unscored —
    CVE-2021-0325 Public exploit

    In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow.…

  • Unscored —
    CVE-2021-0326 Public exploit

    In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lea…

  • Unscored —
    CVE-2021-0327 Public exploit

    In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored bin…

  • Unscored —
    CVE-2021-0328 Public exploit

    In onBatchScanReports and deliverBatchScan of GattService.java, there is a possible way to retrieve Bluetooth scan resu…

  • Unscored —
    CVE-2021-0329 Public exploit

    In several native functions called by AdvertiseManager.java, there is a possible out of bounds write due to a missing b…

  • Unscored —
    CVE-2021-0314 Public exploit

    In onCreate of UninstallerActivity, there is a possible way to uninstall an all without informed user consent due to a …

  • Unscored —
    CVE-2021-0330 Public exploit

    In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking. This cou…

  • Unscored —
    CVE-2021-0331 Public exploit

    In onCreate of NotificationAccessConfirmationActivity.java, there is a possible overlay attack due to an insecure defau…

  • Unscored —
    CVE-2021-0332 Public exploit

    In bootFinished of SurfaceFlinger.cpp, there is a possible memory corruption due to a use after free. This could lead t…

  • Unscored —
    CVE-2021-0333 Public exploit

    In onCreate of BluetoothPermissionActivity.java, there is a possible permissions bypass due to a tapjacking overlay tha…

  • Unscored —
    CVE-2021-0334 Public exploit

    In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default…

  • Unscored —
    CVE-2021-0336 Public exploit

    In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent.…

  • Unscored —
    CVE-2021-0337 Public exploit

    In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lea…

  • Unscored —
    CVE-2021-0302 Public exploit

    In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local e…

  • Unscored —
    CVE-2021-0339 Public exploit

    In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app…

  • Unscored —
    CVE-2021-0340 Public exploit

    In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input…

  • Unscored —
    CVE-2020-28871 Public exploit EPSS 86%

    Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the …