CVE-2021-0509

In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10...

Google Android Resource Management Vulnerability

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. An elevation of privilege vulnerability exists in Google Android 11. The vulnerability arises due to a post-release reuse due to a race condition when decrypting CryptoPlugin.cpp. An...

CVE-2021-0436

In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds read due to integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1...

CVE-2021-0436

In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds read due to integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1...

Out-of-bounds

In decrypt and decrypt12 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...

CVE-2020-0079

In decrypt12 of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.4.0-08), org.sonatype.nexus.plugins.ldap:ldap-common (2.4.0-08) +11 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.4.0-08)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-08 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.4.0-08 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.7.0-m1), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.7.0-m1) +16 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.7.0-m1)

org.sonatype.nexus:nexus-core MAVEN version 2.7.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.7.0-m1 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.4.0-05), org.sonatype.nexus.plugins.ldap:ldap-common (2.4.0-05) +11 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.4.0-05)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-05 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.4.0-05 -...

org.sonatype.nexus.capabilities:nexus-capabilities-model (2.2.1), org.sonatype.nexus.capabilities:nexus-capabilities-testsuite-helper (2.2.1) +13 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.4.0-1)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.capabilities:nexus-capabilities-model 2.2.1 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.6.0-05), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.6.0-05) +16 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.6.0-05)

org.sonatype.nexus:nexus-core MAVEN version 2.6.0-05 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.6.0-05 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.4.0-04), org.sonatype.nexus.plugins.ldap:ldap-common (2.4.0-04) +11 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.4.0-04)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-04 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.4.0-04 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.4.0-05), org.sonatype.nexus.plugins.ldap:ldap-common (2.4.0-05) +11 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.4.0-05)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-05 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.4.0-05 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.6.0-05), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.6.0-05) +16 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.6.0-05)

org.sonatype.nexus:nexus-core MAVEN version 2.6.0-05 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.6.0-05 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.7.0-m1), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.7.0-m1) +16 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.7.0-m1)

org.sonatype.nexus:nexus-core MAVEN version 2.7.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.7.0-m1 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.4.0-08), org.sonatype.nexus.plugins.ldap:ldap-common (2.4.0-08) +11 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.4.0-08)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-08 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.4.0-08 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.6.1-01), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.6.1-01) +16 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.6.1-01)

org.sonatype.nexus:nexus-core MAVEN version 2.6.1-01 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.6.1-01 -...

CVE-2017-13253

In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 8.0, 8.1...