CVE-2023-5964

The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not properly validate the Caption or Message parameters, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This...

CVE-2020-0395

In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2019-8911

Name of the Vulnerable Software and Affected Versions Eventum version 3.5.0 Description An issue was discovered in the software, where the /htdocs/list.php endpoint has a cross-site scripting XSS issue via the show notification list issues or show authorized issues parameters. Recommendations For...