8398 matches found
CVE-2021-0769
In onCreate of AllowBindAppWidgetActivity.java, there is a possible bypass of user interaction requirements due to unclear UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...
CVE-2021-0799
In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-1976479...
PT-2021-13405 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-12 Description: In the PVInitVideoEncoder function of mp4enc api.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution...
PT-2021-13362 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions 9 through 12 Description: The issue is related to improper input validation in the onCreate method of certain activities, allowing HTML tags to interfere with a consent dialog. This could lead to remote escalation of privileg...
PT-2021-13384 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-12 Description: The issue is related to a side channel information disclosure in the getSerialForPackage method of DeviceIdentifiersPolicyService.java. This could allow an attacker to determine whether an app is...
CVE-2021-43830
OpenProject is a web-based project management software. OpenProject versions = 12.0.0 are vulnerable to a SQL injection in the budgets module. For authenticated users with the "Edit budgets" permission, the request to reassign work packages to another budget unsufficiently sanitizes user input in...
CVE-2020-16155
The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data...
CVE-2021-44514
OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...
CVE-2021-43810
Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The Reflected XSS vulnerability occurs because redirect.php does not properly validate the value of the url parameter...
The vulnerability of component C12.22 of the Wireshark network traffic analyzer allows a hacker to cause a service failure.
The vulnerability of component C12.22 of the Wireshark network traffic analyzer is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by injecting specially created packets...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android 11 before System 12...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android 11 prior to System 11, 12...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android 12. The vulnerability arises due to a possible bypass of user interaction requirements due to an unclear UI in onCreate in AllowBindAppWidgetActivity.java. An...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android 11 prior to Framework 12. No details of the vulnerability are available at this time...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system by Google Inc. A security vulnerability exists in Google Android 11 before System 9, 10, 11, and 12...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android 11 prior to Framework 12. No details of the vulnerability are available at this time...
Google Android 代码问题漏洞
Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android 11 prior to Framework 9, 10, 11, and 12. There is no information about this vulnerability yet, so please stay tuned to CNNVD or the vendor's announcement...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android 11 prior to Framework 12. There is no information about this vulnerability yet, please stay tuned to CNNVD or the vendor's announcement...