CVE-2022-20420

In getBackgroundRestrictionExemptionReason of AppRestrictionController.java, there is a possible way to bypass device policy restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

CVE-2022-20415

In handleFullScreenIntent of StatusBarNotificationActivityStarter.java, there is a possible bypass of the restriction of starting activity from background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2022-20415

In handleFullScreenIntent of StatusBarNotificationActivityStarter.java, there is a possible bypass of the restriction of starting activity from background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2022-26031

Name of the Vulnerable Software and Affected Versions rxvt-unicode versions 9.25 through 9.26 Description The issue allows for remote code execution in the Perl background extension of the rxvt-unicode package. This occurs when an attacker can control the data written to the user's terminal and...

CVE-2022-40886

DedeCMS 5.7.98 has a file upload vulnerability in the background...

CVE-2022-40886

DedeCMS 5.7.98 has a file upload vulnerability in the background...

CVE-2022-40886

DedeCMS 5.7.98 has a file upload vulnerability in the background...

Desdev DedeCMS 代码问题漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. DedeCMS 5.7.98 version of the code...

Google Pixel 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a logic error in the getBackgroundRestrictionExceptionReason code of AppRestrictionController.java, which can be exploited by an attacker to elevate...

CVE-2022-40886: Unrestricted Upload of File with Dangerous Type

DedeCMS 5.7.98 has a file upload vulnerability in the background...

PT-2022-25608 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.98 Description: The issue is related to a file upload vulnerability in the background of the software. Recommendations: For DedeCMS version 5.7.98, at the moment, there is no information about a newer version that contains...

PT-2022-7525

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 107 Description The issue is related to the use of the FontFace function on a background worker, which could lead to a use-after-free condition and result in a potentially exploitable crash. This condition occurs when...

PT-2022-14642

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-13 Description A logic error in the code of StatusBarNotificationActivityStarter.java allows for a possible bypass of the restriction of starting activity from background. This could lead to local...

ASB-A-205130886

In createPresentationContext of Presentation.java, there is a possible way to start a foreground activity from background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

XXL-JOB contains a Command execution vulnerability in background tasks

XXL-JOB versions 2.2.0 and prior contain a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case running arbitrary Bash scripts on behalf of users...

GHSA-M54F-RP6R-RRRM XXL-JOB contains a Command execution vulnerability in background tasks

XXL-JOB versions 2.2.0 and prior contain a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case running arbitrary Bash scripts on behalf of users...

CVE-2022-40929

XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case running arbitrary Bash scripts on behalf of users...

Command injection

XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks...

CVE-2022-40929

XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case running arbitrary Bash scripts on behalf of users...

CVE-2022-40929

XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case running arbitrary Bash scripts on behalf of users...