195847 matches found
CVE-2026-28607
In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28596
In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28584
In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28590
In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28583
In validatecamerametadatastructure of camerametadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0084
In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0054
In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0065
In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is...
CVE-2023-20198
此存储库没有 README。...
CVE-2026-49883
In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2013-2251
此存储库没有 README。...
CVE-2026-69325
creationtimestamp| type| source ---|---|--- 2026-09-08 18:53:50+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117236932927667923 2026-09-08 22:02:24+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:02:17+00:00| seen|...
CVE-2026-82004 Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary...
EUVD-2026-73944
Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary...
CVE-2026-82004
Adobe Campaign Classic (ACC) is affected by an OS Command Injection vulnerability (CWE-78) that allows a remote, unauthenticated attacker to execute arbitrary code in the context of the current user. The vulnerability is rated CVSS 10.0 (CRITICAL) with a network attack vector, low complexity, no ...
CVE-2026-6857
⚠️ 安全研究与法律免责声明 📌 本仓库的目的 本仓库严格仅供教育、学术及经授权的网络安全研究目的 使用。 其旨在帮助理解： 受控环境中的安全漏洞与利用概念 沙箱隔离机制及其局限性 安全的软件设计与防御性安全实践 🚫 仅限授权使用 本仓库只能在已获得明确许可的环境中使用，例如： 个人或受控虚拟机 Docker 或隔离的实验室环境 经授权的渗透测试项目 学术或网络安全培训环境 在授权环境之外的任何使用均严格禁止。 ⚖️ 不承担责任 / 不承担义务 本仓库的作者和贡献者不承担 因使用、误用或分发本项目及其内容而产生的任何滥用、损害、损失或法律后果的责任。 使用本仓库即表示您承认：...