Linux Distros Unpatched Vulnerability : CVE-2017-0540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media...

Linux Distros Unpatched Vulnerability : CVE-2017-0818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the Android media framework n/a. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63581671. CVE-2017-0818 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2019-2128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ACELP4t64fx of c4t64fx.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no...

Linux Distros Unpatched Vulnerability : CVE-2017-0595

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context...

Linux Distros Unpatched Vulnerability : CVE-2017-0669

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A information disclosure vulnerability in the Android framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34114752. CVE-2017-066...

Linux Distros Unpatched Vulnerability : CVE-2017-0665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:...

Linux Distros Unpatched Vulnerability : CVE-2017-0473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and da...

Linux Distros Unpatched Vulnerability : CVE-2023-21105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosu...

Linux Distros Unpatched Vulnerability : CVE-2023-21137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In several methods of JobStore.java, uncaught exceptions in job map parsing could lead to local persistent denial of service with no additional execution...

Linux Distros Unpatched Vulnerability : CVE-2022-20480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to...

Linux Distros Unpatched Vulnerability : CVE-2016-0805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The performance event manager for Qualcomm ARM processors in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to ga...

Linux Distros Unpatched Vulnerability : CVE-2015-6640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The prctlsetvmaanonname function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in a...

Linux Distros Unpatched Vulnerability : CVE-2017-0470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and da...

JVN#35290164: "Yahoo! Shopping" App for Android fails to restrict custom URL schemes properly

"Yahoo! Shopping" App for Android provided by LY Corporation contains the following vulnerability. Improper authorization in handler for custom URL scheme CWE-939 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Base Score 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Base Score...

PT-2025-36010

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A permission squatting issue exists in multiple functions of RoleService.java due to a logic error in the code. This could lead to local escalation of privilege on Android versions where...

Linux Distros Unpatched Vulnerability : CVE-2019-2126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code executio...

Linux Distros Unpatched Vulnerability : CVE-2020-0256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when...

Linux Distros Unpatched Vulnerability : CVE-2022-20011

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In getArray of NotificationManagerService.java , there is a possible leak of one user notifications to another due to missing check. This could lead to local...

CVE-2025-55443

Telpo MDM 1.4.6 thru 1.4.9 for Android contains sensitive administrator credentials and MQTT server connection details IP/port that are stored in plaintext within log files on the device's external storage. This allows attackers with access to these logs to: 1. Authenticate to the MDM web platfor...

CVE-2025-55443

Telpo MDM 1.4.6 thru 1.4.9 for Android contains sensitive administrator credentials and MQTT server connection details IP/port that are stored in plaintext within log files on the device's external storage. This allows attackers with access to these logs to: 1. Authenticate to the MDM web platfor...