663 matches found
CVE-2025-22438
In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22438
In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22438
In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22438
In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22438
CVE-2025-22438 affects Android’s InputDispatcher.cpp, in the afterKeyEventLockedInterruptable path, where a use-after-free issue is reported. The vulnerability could enable local elevation of privilege with no additional execution privileges and no user interaction required, per the linked source...
CVE-2025-22438
In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by the use of InputDispatcher.cpp after KeyEventLockedInterrupt. An attacker can exploit the vulnerability to elevate privileges...
Malicious code in typespec-http-dispatcher (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb7c439ba2209388ade9aba27b75e50772bef4afa861aaaf5b7abf6b447a1620 The OpenSSF Package Analysis project identified...
MAL-2025-41343 Malicious code in typespec-http-dispatcher (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb7c439ba2209388ade9aba27b75e50772bef4afa861aaaf5b7abf6b447a1620 The OpenSSF Package Analysis project identified...
MAL-2025-41278 Malicious code in agent-dispatcher (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 70fbbe88de41579cb87272460bf1eba133ca58f846a3ba16dc9182202c03dd6a The OpenSSF Package Analysis project identified 'agent-dispatcher' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in agent-dispatcher (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 70fbbe88de41579cb87272460bf1eba133ca58f846a3ba16dc9182202c03dd6a The OpenSSF Package Analysis project identified 'agent-dispatcher' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...
Linux Distros Unpatched Vulnerability : CVE-2022-40664
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher. CVE-2022-40664 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2022-31692
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types...
The vulnerability of the Apache Kafka message dispatcher, related to deserialization mechanism flaws, allows attackers to execute remote code.
The vulnerability of the Apache Kafka message dispatcher is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute remote code...
CVE-2024-22124
Under certain conditions, Internet Communication Manager ICM or SAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22EXT, WEBDISP 7.22EXT, WEBDISP 7.53, WEBDISP 7.54, could allow an attacker to access...
CVE-2024-33005
Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server ABAP and Java, and SAP Content Server can impersonate other users and may perform some unintended actions. This could lead to a low impact on confidentiality and a...
CVE-2023-29108
The IP filter in ABAP Platform and SAP Web Dispatcher - versions WEBDISP 7.85, 7.89, KERNEL 7.85, 7.89, 7.91, may be vulnerable by erroneous IP netmask handling. This may enable access to backend applications from unwanted sources...
CVE-2023-33987
An unauthenticated attacker in SAP Web Dispatcher - versions WEBDISP 7.49, WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77, WEBDISP 7.81, WEBDISP 7.85, WEBDISP 7.88, WEBDISP 7.89, WEBDISP 7.90, KERNEL 7.49, KERNEL 7.53, KERNEL 7.54 KERNEL 7.77, KERNEL 7.81, KERNEL 7.85, KERNEL 7.88, KERNEL 7.89, KERNEL...
CVE-2023-35871
The SAP Web Dispatcher - versions WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77, WEBDISP 7.85, WEBDISP 7.89, WEBDISP 7.91, WEBDISP 7.92, WEBDISP 7.93, KERNEL 7.53, KERNEL 7.54 KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERNEL 7.91, KERNEL 7.92, KERNEL 7.93, KRNL64UC 7.53, HDB 2.00, XSADVANCEDRUNTIME 1.00,...