Archive
12 July 2023
Vulnerabilities first published on this day (UTC), newest first.
239 results · Feed
-
Unscored —
In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds …
-
Unscored —
In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to l…
-
Unscored —
there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with …
-
Unscored —
In multiple functions of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could l…
-
Unscored —
there is a possible way to bypass cryptographic assurances due to a logic error in the code. This could lead to local e…
-
Unscored —
In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy…
-
Unscored —
In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profil…
-
Unscored —
In SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities via Settings due to a logic er…
-
Unscored —
In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to lo…
-
Unscored —
In getCurrentState of OneTimePermissionUserManager.java, there is a possible way to hold one-time permissions after the…
-
Unscored —CVE-2023-21251 Public exploit
In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper i…
-
Unscored —
In gatt_end_operation of gatt_utils.cc, there is a possible out of bounds write due to a missing bounds check. This cou…
-
Unscored —
In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a …
-
Unscored —
In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device…
-
Unscored —
In getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a possible way to bypass a d…
-
Unscored —CVE-2023-21246 Public exploit
In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to…
-
High 7.8
In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the lo…
-
Unscored —
In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config fil…
-
Unscored —
In rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer overflow. This could le…
-
Unscored —
In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of …
-
Unscored —
In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused …
-
Unscored —CVE-2023-21238 Public exploit
In visitUris of RemoteViews.java, there is a possible leak of images between users due to a confused deputy. This could…
-
Unscored —
In updatePictureInPictureMode of ActivityRecord.java, there is a possible bypass of background launch restrictions due …
-
Unscored —
In openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying the microphone privac…
-
Unscored —CVE-2023-20918 Public exploit
In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused de…
-
Unscored —
Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-…
-
Unscored —
The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user spac…
-
Medium 5.9CVE-2023-3635 Public exploit
Okio GzipSource unhandled exception Denial of Service
GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.
-
Unscored —
This module enables you to allow and/or require users to use a second authentication method in addition to password aut…
-
Medium 6.3
SourceCodester Service Provider Management System sql injection
A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=save_inquiry. The manipulation of the argument id leads to sql inje…
-
High 7.3
Boss Mini document file inclusion
A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown part of the file boss/servlet/document. The manipulation of the argument path leads to file inclusion. It is possible to initiate the attack r…
-
Medium —
iprange may panic when parsing ranges with invalid masks
Parsing a range with a mask larger than 32 bits causes a panic.
-
Medium 4.3
GZ Scripts Vacation Rental Website HTTP POST Request cross site scripting
A vulnerability was found in GZ Scripts Vacation Rental Website 1.8 and classified as problematic. Affected by this issue is some unknown functionality of the file /VacationRentalWebsite/property/8/ad-has-principes/ of the component HTTP POST Request Handler.…
-
Medium 4.3
khodakhah NodCMS POST Request blog-comment-4 cross site scripting
A vulnerability has been found in khodakhah NodCMS 3.4.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /en/blog-comment-4 of the component POST Request Handler. The manipulation of the argument comment_n…
-
Medium 5.5
PAN-OS: Read System Files and Resources During Configuration Commit
A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privilege to commit a specifically created configuration to read local files and resources from the system.
-
Medium 5.5
[FG-VD-23-006] Adobe InDesign 2023 Out-of-Bound Read Vulnerability IV Notification
Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Ex…
-
Medium 5.5
[FG-VD-23-013] Adobe InDesign 2023 Out-of-Bound Read Vulnerability X Notification
Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Ex…
-
Medium 5.5
[FG-VD-23-004] Adobe InDesign 2023 Out-of-Bound Read Vulnerability II Notification
Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Ex…
-
High 7.8
[FG-VD-23-009] Adobe InDesign 2023 Arbitrary Code Execution Vulnerability Notification
Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction…
-
Medium 5.5
[FG-VD-23-011] Adobe InDesign 2023 Out-of-Bound Read Vulnerability VIII Notification
Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Ex…