Lucene search
+L

671 matches found

Cvelist
Cvelist
added 2022/06/15 1:2 p.m.38 views

CVE-2022-20142

In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

8.2AI score0.00228EPSS
SaveExploits0References1
OSV
OSV
added 2022/06/01 12:0 a.m.34 views

ASB-A-216631962

In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS8AI score0.00228EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/11 6:15 p.m.7 views

CVE-2021-39676

In writeThrowable of AndroidFuture.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8CVSS7.2AI score0.00123EPSS
SaveExploits0References2
OSV
OSV
added 2022/02/11 6:15 p.m.4 views

CVE-2021-39676

In writeThrowable of AndroidFuture.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8CVSS7.2AI score0.00123EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/11 6:15 p.m.25 views

Input validation

In writeThrowable of AndroidFuture.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.2CVSS7.5AI score0.00123EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/02/11 5:40 p.m.38 views

CVE-2021-39676

In writeThrowable of AndroidFuture.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

8AI score0.00123EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/02/11 12:0 a.m.8 views

PT-2022-10961 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version 11 Description: The issue is related to a parcel serialization/deserialization mismatch in the writeThrowable function of AndroidFuture.java due to improper input validation. This could lead to local escalation of privilege wi...

7.8CVSS7.6AI score0.00123EPSS
SaveExploits0References2
OSV
OSV
added 2022/02/01 12:0 a.m.38 views

ASB-A-197228210

In writeThrowable of AndroidFuture.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.8AI score0.00123EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/20 7:15 p.m.4 views

CVE-2021-44244

An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php...

9.8CVSS5.8AI score0.01254EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/01/20 7:15 p.m.4 views

CVE-2021-44244

An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php...

9.8CVSS7.4AI score0.01254EPSS
SaveExploits1References2
OSV
OSV
added 2022/01/14 8:15 p.m.6 views

CVE-2021-39620

In ipcSetDataReference of Parcel.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

7.8CVSS7.2AI score0.00119EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/14 8:15 p.m.9 views

CVE-2021-39620

In ipcSetDataReference of Parcel.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

7.8CVSS7.2AI score0.00119EPSS
SaveExploits0References2
NVD
NVD
added 2021/12/15 7:15 p.m.36 views

CVE-2021-0970

In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-1...

7.8CVSS0.00202EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/15 7:15 p.m.4 views

CVE-2021-0970

In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-1...

7.8CVSS7.4AI score0.00202EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/15 7:15 p.m.9 views

CVE-2021-0970

In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-1...

7.8CVSS5.9AI score0.00202EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/15 7:15 p.m.4 views

CVE-2021-0928

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS7.2AI score0.0037EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/15 7:15 p.m.29 views

CVE-2021-0928

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS0.0037EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/15 7:15 p.m.5 views

CVE-2021-0921

In ParsingPackageImpl of ParsingPackageImpl.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS5.9AI score0.00127EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/15 7:15 p.m.21 views

Input validation

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.2CVSS7.7AI score0.0037EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/12/15 7:15 p.m.30 views

Input validation

In ParsingPackageImpl of ParsingPackageImpl.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.2CVSS7.7AI score0.00127EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder