CVE-2021-0992

In onCreate of PaymentDefaultDialog.java, there is a possible way to change a default payment app without user consent due to tapjack overlay. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2021-0979

In isRequestPinItemSupported of ShortcutService.java, there is a possible cross-user leak of packages in which the default launcher supports requests to create pinned shortcuts due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges...

CVE-2021-0799

In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-1976479...

CVE-2021-0997

In handleUpdateNetworkState of GnssNetworkConnectivityHandler.java , there is a possible APN disclosure due to log information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0971

In MPEG4Source::read of MPEG4Extractor.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10...

CVE-2021-0959

In jitmemoryregion.cc, there is a possible bypass of memory restrictions due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID:...

CVE-2021-0977

In phNxpNHalDtaUpdate of phNxpNciHaldta.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Andro...

CVE-2021-0986

In hasGrantedPolicy of DevicePolicyManagerService.java, there is a possible information disclosure about the device owner, profile owner, or device admin due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User...

CVE-2024-34662

Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select Android 14 allows local attackers to execute privileged behaviors...

CVE-2021-2365

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: People Management. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Human Resources...

ROOT-OS-DEBIAN-12-CVE-2023-51596 CVE-2023-51596 in rootio-bluez - Patched by Root

Root has patched CVE-2023-51596 in the rootio-bluez package for Root:Debian:12. Multiple fixed versions available...

CVE-2025-9637

creationtimestamp| type| source ---|---|--- 2026-01-06 11:00:54+00:00| seen| Telegram/IlWQ07jJviXeo5OUkyeWyOnEzY4vvLAOQ4V-Tmm5SU86Ikw 2026-01-06 12:20:17+00:00| seen| Telegram/SM5rGqZQT9feFZiiDcRuV-68lM90VUT1MKindCNDiC2leBs 2026-01-06 12:58:09+00:00| seen|...

Debian: Security Advisory (DSA-6094-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-0576

creationtimestamp| type| source ---|---|--- 2026-01-04 11:00:38+00:00| published-proof-of-concept| Telegram/WAeIMp-qLoix2fMN5m4VAPW7c3mTPvm4gc9HGkPHwEa3bG0 2026-01-04 12:49:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mblxjyyw4q2c...

CVE-2025-64125

A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2025-12-1 December, 2025. End users do not have to take any action to mitigate the issue...

PT-2026-1140

Name of the Vulnerable Software and Affected Versions Nuvation Energy nCloud VPN Service versions prior to 2025-12-01 Description A flaw exists in the Nuvation Energy nCloud VPN Service that permitted Network Boundary Bridging. This allowed for lateral client-to-client pivoting with minimal...

CVE-2025-48768

Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fsinoderemove code of the Apache NuttX RTOS that allowed root filesystem inode removal leading to a debug assert trigger that is disabled by default, NULL pointer dereference handled differently depending on the targ...

ROOT-OS-DEBIAN-12-CVE-2025-14512 CVE-2025-14512 in rootio-glib2.0 - Patched by Root

Root has patched CVE-2025-14512 in the rootio-glib2.0 package for Root:Debian:12. Multiple fixed versions available...

PT-2026-1111

Name of the Vulnerable Software and Affected Versions Plex Media Server versions prior to 2025-12-31 Description A non-server device token can retrieve share tokens via the shared servers endpoint. These share tokens are intended for unrelated access. Recommendations Update Plex Media Server to a...

CVE-2025-15431

creationtimestamp| type| source ---|---|--- 2026-01-01 12:57:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115819952898592287 2026-01-02 07:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbgd4k2u3n2u 2026-01-02 18:54:15+00:00| published-proof-of-concep...