CVE-2025-48544

A SQL injection vulnerability in the MediaProvider component of the Android operating system allows an attacker to read files belonging to other applications. This flaw can lead to local escalation of privilege without requiring additional execution privileges or user interaction. This issue affe...

CVE-2014-5236: Improper Limitation of a Pathname to a Restricted Directory

Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange OX AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow remote attackers to read application files via a full pathname in a crafted 1 OLE Object or 2 image in an OpenDocument text file...