Lucene search
+L

13 matches found

NVD
NVD
•added 2026/08/07 6:17 p.m.•28 views

CVE-2026-44965

In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities IncidentWidgetActivity, MonitorSavedViewWidgetActivity, OnCallShiftsWidgetActivity, OnCallPagesWidgetActivity, SloWidgetActivity, DashboardWidgetActivity are exported with no permission...

5.5CVSS0.00161EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/08/07 6:02 p.m.•19 views

CVE-2026-44965

In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities IncidentWidgetActivity, MonitorSavedViewWidgetActivity, OnCallShiftsWidgetActivity, OnCallPagesWidgetActivity, SloWidgetActivity, DashboardWidgetActivity are exported with no permission...

5.5CVSS5.9AI score0.00161EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-27011

Malicious code in bioql PyPI...

5.5CVSS6.4AI score0.00075EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/05 5:15 p.m.•20 views

CVE-2025-32317

In App Widget, there is a possible Information Disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00075EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/05 5:15 p.m.•30 views

CVE-2025-32317

In App Widget, there is a possible Information Disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS0.00075EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/05 4:10 p.m.•25 views

CVE-2025-32317

In App Widget, there is a possible Information Disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00075EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/05 4:10 p.m.•55 views

CVE-2025-32317

A confused deputy condition in App Widget leads to a potential Information Disclosure vulnerability. This flaw allows for local information disclosure without requiring additional execution privileges or user interaction. While specific affected versions are not provided, the vulnerability is con...

5.5CVSS4.8AI score0.00075EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/09/05 4:10 p.m.•7 views

CVE-2025-32317

In App Widget, there is a possible Information Disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

4.8AI score0.00075EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/05 12:00 a.m.•22 views

PT-2025-36239

Name of the Vulnerable Software and Affected Versions: App Widget affected versions not specified Description: An information disclosure issue exists in App Widget due to a confused deputy condition. This could result in local information disclosure without requiring additional execution privileg...

5.5CVSS5.6AI score0.00075EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/05 12:00 a.m.•5 views

CVE-2025-32317: Unintended Proxy or Intermediary

In App Widget, there is a possible Information Disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.8AI score0.00075EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•15 views

Malicious code in @avocado-team/app-center-app-widget (npm)

The package @avocado-team/app-center-app-widget was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2022/12/13 4:15 p.m.•20 views

CVE-2022-20470

In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS5.9AI score0.0019EPSS
SaveExploits0References1
OSV
OSV
•added 2022/12/13 4:15 p.m.•18 views

UBUNTU-CVE-2022-20470

In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS5.9AI score0.0019EPSS
SaveExploits0References3
Rows per page
Query Builder