Integer overflow

In parseTrackFragmentRun of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20532

In CVE-2022-20532, the vulnerability lies in MPEG4Extractor.cpp’s parseTrackFragmentRun() where an integer overflow can cause an out-of-bounds read. This may enable remote elevation of privileges without user interaction on Android 13 devices. Documented impact is high across confidentiality, int...

CVE-2023-20946

In onStart of BluetoothSwitchPreferenceController.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2023-20946

In onStart of BluetoothSwitchPreferenceController.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

SUSE CVE-2020-16303

A use-after-free vulnerability in xpsfinishimagepath in devices/vector/gdevxps.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted PDF file. This is fixed in v9.51...

SUSE CVE-2020-16304

A buffer overflow vulnerability in imagerendercolorthresh in base/gxicolor.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to escalate privileges via a crafted eps file. This is fixed in v9.51...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, Adobe Acrobat Reader 2015 are related to insecure privilege management, allowing attackers to escalate their privileges.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to insecure management of privileges. Exploiting these vulnerabilities can allow...

PT-2023-12277 · Adminlte · Adminlte

Name of the Vulnerable Software and Affected Versions: AdminLTE version 3.1.0 Description: The issue allows remote attackers to gain escalated privilege and view sensitive information. This is achieved via the "/admin/index2.html" and "/admin/index3.html" API endpoints. The estimated number of...

CVE-2021-31575

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID:...

CVE-2021-31574

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID:...

Command injection

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID:...

CVE-2021-31573

CVE-2021-31573 affects Config Manager. The vulnerability is a command injection caused by improper input validation in Config Manager components, enabling remote escalation of privilege. Documentation consistently notes no user interaction required and an attack vector that could be exposed over ...

CVE-2021-31575

CVE-2021-31575 describes a command injection in Config Manager due to improper input validation, enabling remote privilege escalation with no user interaction. Public sources (NVD, Red Hat, CVE lists) consistently cite the same issue and patch (Patch ID: A20210009; Issue ID: OSBNB00123234). Impac...

CVE-2021-31577

In Boa, there is a possible escalation of privilege due to a missing permission check. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID:...

PT-2023-12148 · Unknown · Config Manager

Name of the Vulnerable Software and Affected Versions: Config Manager affected versions not specified Description: The issue is related to a possible command injection in Config Manager due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker wi...

CVE-2021-31575

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID:...

PT-2023-12152 · Boa · Boa

Name of the Vulnerable Software and Affected Versions: Boa affected versions not specified Description: The issue is related to a possible escalation of privilege due to a stack buffer overflow in Boa. This could lead to remote escalation of privilege from a proximal attacker with no additional...

PT-2023-12147 · Unknown · Config Manager

Name of the Vulnerable Software and Affected Versions: Config Manager affected versions not specified Description: The issue is related to a possible command injection in Config Manager due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker wi...

CVE-2021-31573

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID:...

ASB-A-244423101

In onStart of BluetoothSwitchPreferenceController.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation...