PT-2023-22404 · Unknown · Blue Light Filter

Name of the Vulnerable Software and Affected Versions: Blue Light Filter version 1.5.5 Description: The issue allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files. This can lead to unauthorized access and control. Recommendations: For Blue...

Facemoji Emoji Keyboard 安全漏洞

Facemoji Emoji Keyboard is a free AI smart chatgbt Cool custom keyboard font from Facemoji. A security vulnerability exists in Facemoji Emoji Keyboard version v.2.9.1.2 that originates from a denial of service via a SharedPreference file...

Urbandroid Twilight 安全漏洞

Urbandroid Twilight is an app from Urbandroid Inc. It is used to provide healthy sleep. A security vulnerability exists in Urbandroid Twilight version v.13.3, which originates from an unauthorized application causing a persistent denial of service by manipulating the SharedPreference file...

CVE-2023-29746

An issue found in The Thaiger v.1.2 for Android allows unauthorized apps to cause a code execution attack by manipulating the SharedPreference files...

PT-2023-22396 · Unknown · The Thaiger

Name of the Vulnerable Software and Affected Versions: The Thaiger version 1.2 Description: An issue in The Thaiger for Android allows unauthorized apps to cause a code execution attack by manipulating the SharedPreference files. Recommendations: For The Thaiger version 1.2, consider restricting...

CVE-2023-29722

The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker cou...

PUB-A-269738057

In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Loka Digital Media SoLive 安全漏洞

Loka Digital Media SoLive is a social platform from Loka Digital Media, Inc. A security vulnerability exists in Loka Digital Media SoLive versions 1.6.14 through 1.6.20 that originates from an attacker being able to modify data in any SharedPreference file that is loaded into memory when the...

thunderbird security update

102.10.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 102.10.0-2 - Update to 102.10.0 build2 102.10.0-1 - Update to 102.10.0 build1...

WHO 安全漏洞

WHO is an online video community application. A security vulnerability exists in WHO versions 1.0.28, 1.0.30, and 1.0.32, which stems from a vulnerability that allows an attacker to cause a denial of service via a SharedPreference file...

PT-2023-20995 · Unknown · Dualspace Super Secuirty

Name of the Vulnerable Software and Affected Versions: DUALSPACE Super Secuirty version 2.3.7 Description: An issue in DUALSPACE Super Secuirty allows an attacker to cause a denial of service via the SharedPreference files. Recommendations: For DUALSPACE Super Secuirty version 2.3.7, consider...

DUALSPACE Super Secuirty 资源管理错误漏洞

DUALSPACE Super Secuirty is a professional anti-virus application from DUALSPACE. It has virus scanning and virus removal functions. A security vulnerability exists in DUALSPACE Super Secuirty v.2.3.7, which can be exploited by an attacker to cause a denial of service via a SharedPreference file...

CVE-2023-23923

The vulnerability was found Moodle which exists due to insufficient limitations on the "start page" preference. A remote attacker can set that preference for another user. The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality...

UBUNTU-CVE-2023-23923

The vulnerability was found Moodle which exists due to insufficient limitations on the "start page" preference. A remote attacker can set that preference for another user. The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality...

CVE-2023-23923

The vulnerability was found Moodle which exists due to insufficient limitations on the "start page" preference. A remote attacker can set that preference for another user. The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality...

SUSE CVE-2005-0075

prefs.php in SquirrelMail before 1.4.4, with registerglobals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers...

SUSE CVE-2010-3694

Cross-site request forgery CSRF vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for requests to a preference form...

SUSE CVE-2011-1164

Vino before 2.99.4 can connect external networks contrary to the statement in the vino-preferences dialog box, which might make it easier for remote attackers to perform attacks...

SUSE CVE-2016-9866

An issue was discovered in phpMyAdmin. When the argseparator is different from its default & value, the CSRF token was not properly stripped from the return URL of the preference import action. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to...

memos 安全漏洞

memos is an open source hosted memo center with knowledge management and social features. A security vulnerability exists in memos, which can be exploited by an attacker to change a user's language preference...