Design/Logic Flaw

In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

Design/Logic Flaw

Rejected reason: Erroneous assignement...

Design/Logic Flaw

Rejected reason: Erroneous assignment...

Design/Logic Flaw

In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to bypass the restrictions on starting activities from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

Design/Logic Flaw

In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Design/Logic Flaw

In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Design/Logic Flaw

An issue in VitalPBX v.3.2.4-5 allows an attacker to execute arbitrary code via a crafted payload to the /var/lib/vitalpbx/scripts folder...

Design/Logic Flaw

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Design/Logic Flaw

The aioaqueue function, used by the liolistio system call, fails to release a reference to a credential in an error case. An attacker may cause the reference count to overflow, leading to a use after free UAF...

Design/Logic Flaw

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Design/Logic Flaw

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Design/Logic Flaw

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Design/Logic Flaw

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Design/Logic Flaw

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Design/Logic Flaw

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Design/Logic Flaw

Handlers for CFGPAGE read / write ioctls in the mpr, mps, and mpt drivers allocated a buffer of a caller-specified size, but copied to it a fixed size header. Other heap content would be overwritten if the specified size was too small. Users with access to the mpr, mps or mpt device node may...

Design/Logic Flaw

Web sessions in the management interface in Palo Alto Networks PAN-OS software do not expire in certain situations, making it susceptible to unauthorized access...

Design/Logic Flaw

When a BIG-IP Advanced WAF or BIG-IP ASM policy with a Request Body Handling option is attached to a virtual server, undisclosed requests can cause the BD process to terminate. The condition results from setting the Request Body Handling option in the Header-Based Content Profile for an Allowed U...

Design/Logic Flaw

CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project file in EcoStruxure Control Expert when a local user tampers with the memory of the engineering workstation...

Design/Logic Flaw

Uncaught exception for some IntelR PROSet/Wireless and IntelR KillerTM Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access...