Archive
1 June 2026
Vulnerabilities first published on this day (UTC), newest first.
379 results · Feed
-
Low 3.3
SourceCodester Customer Review App review_app.py get_all_reviews denial of service
A vulnerability was found in SourceCodester Customer Review App 1.0. Affected by this vulnerability is the function add_review/save_review/get_all_reviews of the file review_app.py. Performing a manipulation of the argument name/comment results in denial of s…
-
High 8.2
Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting
Kiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerability in Kiteworks Secure Data Forms could allow an external attacker to trick a user into executing arbitrary JavaScript code. Upgrade Kiteworks to version 9.3.0 or la…
-
High 8.4
Dräger Infinity Explorer C700 Privilege Escalation via Kiosk Mode Bypass
Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk mode and access the underlying operating system through a specific dialog interaction. Attackers can exploit this kiosk escape to take cont…
-
Medium 4.3
PackageKit API pk-transaction.c g_file_test improper authorization
A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed…
-
Critical 10.0
Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure. The server contains a vu…
-
Medium 6.5
Dräger Infinity Delta/Kappa Patient Monitor DoS via Malformed Network Packet
Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service vulnerability that allows remote attackers to cause the monitor to reboot by sending a malformed network packet. Attackers can repeatedly send malformed network packets to…
-
High 8.8
UTT HiPER 1200GW formFireWall strcpy stack-based overflow
A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/formFireWall. This manipulation of the argument Profile causes stack-based buffer overflow. Remote exploitation of the attack is possible. The e…
-
Medium 4.0
In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a…
-
High 7.8
In multiple functions of NotificationChannel.java, there is a possible desync in persistence due to an incorrect bounds…
-
Low 3.3
In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. …
-
High 7.8
In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to m…
-
High 7.8
In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to cer…
-
High 7.8
In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confuse…
-
High 8.0
In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic erro…
-
High 7.8
In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to lo…
-
High 7.8
In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to…
-
High 8.0
In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption within the privileged…
-
High 7.8
In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. Thi…
-
Medium 5.5
In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper i…
-
High 7.8
In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input v…
-
High 7.8
In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch (bal) due to a…
-
High 7.8
In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of pri…
-
High 7.8CVE-2026-0091 Public exploit
In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell …
-
Medium 5.5
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer…
-
Medium 6.5
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflo…
-
Medium 5.5
In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to improp…
-
High 7.8
In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to misle…
-
High 7.8
In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a miss…
-
High 7.8
In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app…
-
Medium 6.8
In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null …
-
Medium 5.9
In multiple functions of WindowState.java, there is a possible way to trick a user into accepting a permission due to a…
-
Medium 5.5
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a permanent denial of service due…
-
Medium 5.5
In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, there is a possible persistent dos issue due …
-
Medium 5.5
In getPreferredSize of LauncherProcessImageListener.kt, there is a possible denial of service due to resource exhaustio…
-
Medium 5.5
In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This coul…
-
High 8.0
In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overf…
-
High 7.8CVE-2026-0075 Public exploit
In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead …
-
High 7.8
In validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect bounds check. This cou…
-
Medium 5.5
In multiple functions of DevicePolicyManagerService.java, there is a possible way to hide a system critical package due…
-
Medium 6.5
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system to crash due to an int…