Lucene search
+L

1169 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2017-7064

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected...

5.5CVSS6.5AI score0.04123EPSS
SaveExploits5References2
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2015-6644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information via a crafted application, aka internal...

4.3CVSS6.2AI score0.00934EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2025/04/02 1:29 p.m.4 views

SUSE CVE-2025-3067

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted app. Chromium security severity: Medium...

8.8CVSS6.8AI score0.00552EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/06/19 12:0 a.m.8 views

The vulnerability of the `createSessionInternal` function in the `PackageInstallerService.java` module of the Android operating system allows a hacker to access the database of any application.

The vulnerability of the createSessionInternal function in the PackageInstallerService.java module of the Android operating system is related to the lack of encapsulation around special characters in the name of the installer when it is written to /data/system/packages.list. Exploiting this...

8.4CVSS5.6AI score0.0146EPSS
SaveExploits17References3Affected Software1
UbuntuCve
UbuntuCve
added 2024/04/17 8:15 a.m.22 views

CVE-2024-3838

Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed an attacker who convinced a user to install a malicious app to perform UI spoofing via a crafted app. Chromium security severity: Medium...

5.5CVSS6.6AI score0.00366EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/04/17 7:46 a.m.16 views

CVE-2024-3838

Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed an attacker who convinced a user to install a malicious app to perform UI spoofing via a crafted app. Chromium security severity: Medium...

6.1AI score0.00366EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/04/17 7:46 a.m.28 views

CVE-2024-3838

Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed an attacker who convinced a user to install a malicious app to perform UI spoofing via a crafted app. Chromium security severity: Medium...

6.4AI score0.00366EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/02/13 12:0 a.m.8 views

PT-2024-1883 · Microsoft · Teams For Android

Name of the Vulnerable Software and Affected Versions: Microsoft Teams for Android affected versions not specified Description: The issue is related to insufficient protection of service data in Microsoft Teams for Android, which can allow an attacker to gain unauthorized access to protected...

5CVSS9.1AI score0.00971EPSS
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2023/09/12 3:15 p.m.5 views

CVE-2023-40218

An issue was discovered in the NPU kernel driver in Samsung Exynos Mobile Processor 9820, 980, 2100, 2200, 1280, and 1380. An integer overflow can bypass detection of error cases via a crafted application...

3.3CVSS5.8AI score0.00175EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:36 a.m.3 views

SUSE CVE-2013-4163

The ip6appenddatamtu function in net/ipv6/ip6output.c in the IPv6 implementation in the Linux kernel through 3.10.3 does not properly maintain information about whether the IPV6MTU setsockopt option had been specified, which allows local users to cause a denial of service BUG and system crash via...

4.7CVSS6AI score0.00524EPSS
SaveExploits1References7
SUSE CVE
SUSE CVE
added 2023/02/15 5:31 a.m.5 views

SUSE CVE-2014-1484

Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted application...

5CVSS8.2AI score0.01556EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 5:27 a.m.5 views

SUSE CVE-2014-4362

The Sandbox Profiles implementation in Apple iOS before 8 does not properly restrict the third-party app sandbox profile, which allows attackers to obtain sensitive Apple ID information via a crafted app...

5CVSS7.3AI score0.01603EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:21 a.m.5 views

SUSE CVE-2015-1297

The WebRequest API implementation in extensions/browser/api/webrequest/webrequestapi.cc in Google Chrome before 45.0.2454.85 does not properly consider a request's source before accepting the request, which allows remote attackers to bypass intended access restrictions via a crafted 1 app or 2...

7.5CVSS8.8AI score0.0224EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:0 a.m.7 views

SUSE CVE-2016-5857

The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the kernel via a crafted application, aka Android internal bug 34386529 and Qualcomm internal bug CR1094140...

7.8CVSS7.3AI score0.0026EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:57 a.m.2 views

SUSE CVE-2016-7644

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service...

9.3CVSS6.9AI score0.0676EPSS
SaveExploits6References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:10 a.m.2 views

SUSE CVE-2019-13707

Insufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0.3904.70 allowed a local attacker to leak files via a crafted application...

5.5CVSS7.8AI score0.0045EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2023/02/15 4:2 a.m.2 views

SUSE CVE-2020-6437

Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application...

4.3CVSS6AI score0.0172EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 3:39 a.m.5 views

SUSE CVE-2021-37990

Inappropriate implementation in WebView in Google Chrome on Android prior to 95.0.4638.54 allowed a remote attacker to leak cross-origin data via a crafted app...

5.5CVSS6.5AI score0.00588EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2023/02/15 3:31 a.m.4 views

SUSE CVE-2022-3310

Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. Chromium security severity: Medium...

6.5CVSS7AI score0.0045EPSS
SaveExploits1References5
OSV
OSV
added 2022/11/01 8:15 p.m.2 views

DEBIAN-CVE-2022-3310

Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. Chromium security severity: Medium...

6.5CVSS7.5AI score0.0045EPSS
SaveExploits1References1
Rows per page
Query Builder