7950 matches found
CVE-2023-20919
In getStringsForPrefix of Settings.java, there is a possible prevention of package uninstallation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2023-20904
In getTrampolineIntent of SettingsActivity.java, there is a possible launch of arbitrary activity due to an Intent mismatch in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2022-20493
CVE-2022-20493 affects Android 10–13 (Android-10 to Android-13) via Condition.java, where improper input validation could grant notification access and cause local elevation of privilege. Exploitation requires user interaction; no additional execution privileges are needed. Patch references point...
CVE-2023-20915
CVE-2023-20915 concerns a logic error in PhoneAccountRegistrar.java (Android framework) that can allow enabling a phone account without user interaction. The issue enables local escalation of privilege with no additional execution privileges, impacting Android 10–13 per the CVE record. The proble...
Threat Round up for January 13 to January 20
Today, Talos is publishing a glimpse into the most prevalent threats weve observed between Jan. 13 and Jan. 20. As with previous roundups, this post isnt meant to be an in-depth analysis. Instead, this post will summarize the threats weve observed by highlighting key behavioral characteristics,...
CVE-2022-48120
SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd on March 13, 2021, allows attackers to execute arbitrary commands via the contact and doctor parameters to /search.php...
CVE-2023-22373
creationtimestamp| type| source ---|---|--- 2023-01-20 07:22:13+00:00| seen| https://t.me/cibsecurity/56742...
Oracle OpenJDK Vulnerability (CVE-2023-21843)
Oracle OpenJDK is prone to a vulnerability in the sound component. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:openjdk...
CVE-2022-2962 affecting package qemu for versions less than 6.2.0-13
CVE-2022-2962 affecting package qemu for versions less than 6.2.0-13. A patched version of the package is available...
CVE-2021-4207 affecting package qemu for versions less than 6.2.0-13
CVE-2021-4207 affecting package qemu for versions less than 6.2.0-13. A patched version of the package is available...
rentasycapitales.es Cross Site Scripting vulnerability OBB-3148476
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-22493
creationtimestamp| type| source ---|---|--- 2023-01-13 18:31:13+00:00| seen| https://t.me/cibsecurity/56488 2025-07-31 03:00:05+00:00| published-proof-of-concept| Telegram/3kjMLtWVSsmD2y1OzP7zGlpEhe6KWlREURwzXKH3eCeJgh0 2026-09-05 01:00:05+00:00| seen|...
CVE-2023-22494
creationtimestamp| type| source ---|---|--- 2023-01-13 18:31:12+00:00| seen| https://t.me/cibsecurity/56487...
goldenbookhotels.it Cross Site Scripting vulnerability OBB-3147982
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
an-essay.com Cross Site Scripting vulnerability OBB-3147947
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-42274
creationtimestamp| type| source ---|---|--- 2023-01-13 07:31:07+00:00| seen| https://t.me/cibsecurity/56478...
CVE-2022-3159
creationtimestamp| type| source ---|---|--- 2023-01-13 07:30:56+00:00| seen| https://t.me/cibsecurity/56470...
CVE-2022-42286
creationtimestamp| type| source ---|---|--- 2023-01-13 07:30:52+00:00| seen| https://t.me/cibsecurity/56466...