Skip to content
OpenAdvisories

Archive

June 2022

Vulnerabilities first published in this month (UTC), newest first.

2,191 results · Feed

  • Unscored —

    In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input channel for embedd…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-209324757References: N/A

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/A

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-207254598References: N/A

  • Unscored —

    In TBD of TBD, there is a possible use after free bug. This could lead to local escalation of privilege with System exe…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-209153114References: N/A

  • Unscored —

    In hypx_create_blob_dmabuf of faceauth_hypx.c, there is a possible out of bounds write due to a missing bounds check. T…

  • Unscored —

    In handle_ramdump of pixel_loader.c, there is a possible way to create a ramdump of non-secure memory due to a missing …

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-210936609References: N/A

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-211683760References: N/A

  • Unscored —

    In ioctl_dpm_qos_update and ioctl_event_control_set of (TBD), there is a possible out of bounds write due to an integer…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-209906686References: N/A

  • Unscored —

    In auth_store of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This c…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-209252491References: N/A

  • Unscored —

    In exynos_secEnv_init of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check. This co…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-207116951References: N/A

  • Unscored —

    In onbind of ShannonRcsService.java, there is a possible access to protect data due to a missing permission check. This…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-215565667References: N/A

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-209421931References: N/A

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-211162353References: N/A

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-210594998References: N/A

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-204956204References: N/A

  • Unscored —

    In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This …

  • Unscored —

    In asn1_parse of asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to lo…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-204891956References: N/A

  • Unscored —

    In asn1_p256_int of crypto/asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could …

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/A

  • Unscored —

    In asn1_ec_pkey_parse of acropora/crypto/asn1_common.c, there is a possible out of bounds read due to an incorrect boun…

  • Unscored —

    In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This …

  • Unscored —

    In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due…

  • Unscored —

    In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local esc…

  • Unscored —

    In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead t…

  • Unscored —

    In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local esc…

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-210712565References: N/A

  • Unscored —

    Product: AndroidVersions: Android kernelAndroid ID: A-211685939References: N/A

  • Unscored —

    In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privi…

  • Unscored —

    In uploadFile of FileUploadServiceImpl.java, there is a possible incorrect file access due to a confused deputy. This c…

  • Unscored —

    In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free. This could lead …

  • Medium 4.1

    WordPress Team Manager plugin <= 1.6.9 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

    Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in DynamicWebLab's WordPress Team Manager plugin <= 1.6.9 at WordPress.

  • Medium 4.1

    WordPress Travel Management plugin <= 2.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

    Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Nicdark d.o.o. Travel Management plugin <= 2.0 at WordPress.