CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

14611 matches found

Cvelist•added 2021/10/06 2:11 p.m.•43 views

CVE-2021-0690

In ih264dmarkerrsliceskip of ih264dparsepslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9...

6.7AI score0.00804EPSS

SaveExploits0References1

Cvelist•added 2021/10/06 2:11 p.m.•35 views

CVE-2021-0684

In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

8AI score0.00127EPSS

SaveExploits0References1

Cvelist•added 2021/10/06 2:10 p.m.•34 views

CVE-2021-0688

In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8....

7.2AI score0.0016EPSS

SaveExploits0References1

CVE•added 2021/10/06 2:10 p.m.•147 views

CVE-2021-0688

CVE-2021-0688 is a local privilege-escalation race-condition vulnerability in Android affecting PhoneWindowManager.lockNow (lock screen bypass). Exploitation could grant higher privileges without user interaction; impact is described as local escalation with user privileges needed. Affected Andro...

7CVSS6.9AI score0.0016EPSS

SaveExploits0References1Affected Software1

CVE•added 2021/10/05 8:50 p.m.•72 views

CVE-2021-3319

CVE-2021-3319 (Zephyr) is linked to a null pointer dereference caused by incorrect 802.15.4 frame validation for omitted source/destination addresses. Affected product: Zephyr RTOS, specifically versions >= v2.4.0. Root cause: mishandling of omitted addresses leading to NULL Pointer Dereferenc...

9.8CVSS8.1AI score0.0088EPSS

SaveExploits1References1Affected Software1

Openbugbounty•added 2021/10/03 1:03 a.m.•36 views

a-cp.fr Cross Site Scripting vulnerability OBB-2154074

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0