42 matches found
UBUNTU-CVE-2025-40338
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Do not share the name pointer between components By sharing 'name' directly, tearing down components may lead to use-after-free errors. Duplicate the name to avoid that. At the same time, update the order of...
CVE-2025-48615
In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48615
Technical details (affected product/version, root cause, exploitability, impact, patch) for CVE-2025-48615 are not publicly provided in the supplied documents. The CVE is referenced in patch previews but no specifics are available here.
ASB-A-352024705
In onSomePackagesChanged of VoiceInteractionManagerService.java, there is a possible way for a third party application's component name to persist even after uninstalling due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges...
PT-2025-43493
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems due to insufficient input validation. Exploitation of this issue may allow an attacker to escalate privileges...
EUVD-2018-2388
Malware in sbrugna...
EUVD-2025-26892
Malicious code in bioql PyPI...
CVE-2025-26439
In getComponentName of AccessibilitySettingsUtils.java, there is a possible way to for a malicious Talkback service to be enabled instead of the system component due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...
PT-2025-36090
Name of the Vulnerable Software and Affected Versions: AccessibilitySettingsUtils.java affected versions not specified Description: A logic error in the getComponentName function within AccessibilitySettingsUtils.java may allow a malicious Talkback service to be enabled instead of the system...
PT-2025-49791
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's ASoC Advanced Linux Sound Architecture Intel AVS Audio Video System component. Sharing the name pointer directly between components can lead to...
GHSA-C87F-FQ5G-63R2 Cross-site scripting in Unicorn framework
The Unicorn framework through 0.35.3 for Django allows XSS via component.name...
CVE-2021-42053
The Unicorn framework through 0.35.3 for Django allows XSS via component.name...
CVE-2021-42053
The Unicorn framework through 0.35.3 for Django allows XSS via component.name...
PYSEC-2021-357
The Unicorn framework through 0.35.3 for Django allows XSS via component.name...
CVE-2021-42053
The Unicorn framework through 0.35.3 for Django allows XSS via component.name...
PYSEC-2021-357
The Unicorn framework through 0.35.3 for Django allows XSS via component.name...
Open-AudIT Community Cross-Site Scripting Vulnerability
Open-AudIT is a network discovery and auditing program. The program intelligently scans networks and network devices and provides status reports.Open-AudIT Community is its community version. A cross-site scripting vulnerability exists in Open-AudIT Community version 2.2.0. A remote attacker can...
CVE-2018-9155
Cross-site scripting XSS vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the Admin-Logs section with a logs?logs.type= URI and the Manage-Attributes section via the "Name display"...
CVE-2018-9155
Cross-site scripting XSS vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the Admin-Logs section with a logs?logs.type= URI and the Manage-Attributes section via the "Name display"...