4992 matches found
PT-2022-26633 · Apple · Ipados +4
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.2 iPadOS versions prior to 16.2 macOS Ventura versions prior to 13.1 watchOS versions prior to 9.2 Description: Multiple issues were addressed by removing the vulnerable code. An app may be able to bypass Privacy...
PT-2022-14671 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a path traversal error in the writeApplicationRestrictionsLAr function of UserManagerService.java. This error could allow an overwrite of system files,...
PT-2022-9131 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a possible denial of service due to resource exhaustion in the findAllDeAccounts function of AccountsDb.java. This could lead to a local denial of service wit...
PT-2022-14700 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to several functions that parse avrc responses in avrc pars ct.cc and related files, where possible out of bounds reads can occur due to integer overflows. This...
PT-2022-14701 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a possible failure to persist permissions settings in the NotificationChannel of NotificationChannel.java due to resource exhaustion. This could lead to local...
CVE-2022-39914
Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to Android T13 allows local attacker to access connected DLNA device information...
CVE-2022-39913
Exposure of Sensitive Information to an Unauthorized Actor in Persona Manager prior to Android T13 allows local attacker to access user profiles information...
CVE-2022-39912
Improper handling of insufficient permissions vulnerability in setSecureFolderPolicy in PersonaManagerService prior to Android T13 allows local attackers to set some setting value in Secure folder...
PT-2022-25106 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to T13 Description: The issue is related to improper handling of insufficient permissions in the setSecureFolderPolicy function within the PersonaManagerService. This allows local attackers to set certain setting values...
PT-2022-14711 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a possible out of bounds read in the fdt path offset namelen function of fdt ro.c due to an incorrect bounds check. This could lead to local information...
PT-2022-14691 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to an incorrect bounds check in the toLanguageTag function of LocaleListCache.cpp, which could lead to a possible out of bounds read. This might result in remote...
Google Pixel 安全漏洞
Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in the enforceVisualVoicemailPackage of PhoneInterfaceManager.java in Google Android version 13.0, which stems from a privilege bypass issue. An attacker can exploit the...
Discourse 输入验证错误漏洞
Discourse is an open source community discussion platform. The platform includes features such as community, email and chat rooms. An input validation error vulnerability exists in versions prior to Discourse 2.9.0.beta13, which stems from the ability for users to post chat messages of unlimited...
CVE-2022-41326
The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbitrary scripts due to improper authorization controls. A successful exploit could allow remote code execution within the context of the application...
GHSA-68M8-V89J-7J2P Garbage collection issue in BC-FJA in Java 13 and later
An issue was discovered in the FIPS Java API of Bouncy Castle BC-FJA before 1.0.2.4. Changes to the JVM garbage collector in Java 13 and later trigger an issue in the BC-FJA FIPS modules where it is possible for temporary keys used by the module to be zeroed out while still in use by the module,...
CVE-2022-45146
An issue was discovered in the FIPS Java API of Bouncy Castle BC-FJA before 1.0.2.4. Changes to the JVM garbage collector in Java 13 and later trigger an issue in the BC-FJA FIPS modules where it is possible for temporary keys used by the module to be zeroed out while still in use by the module,...
WordPress plugin Mantenimiento Web 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Mantenimiento Web 0.13 and earlier versions are vulnerable to cross-site request forgery,...
CVE-2022-45071
Cross-Site Request Forgery CSRF vulnerability in WPML Multilingual CMS premium plugin = 4.5.13 on WordPress...
PT-2022-27400 · WordPress · Wpml Multilingual Cms
Name of the Vulnerable Software and Affected Versions: WPML Multilingual CMS premium plugin versions = 4.5.13 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...