In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to...
CVE-2026-0093
In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of priv
2026-06-02 归档
今日共收录 1188 条安全情报，包含 407 个 CVE，402 篇安全通告，以及 101 篇研究论文。
← 返回归档列表A vulnerability was detected in UTT HiPER 1200GW up to 2.5.3-170306. This affects the function...
CVE-2026-10292
A vulnerability was detected in UTT HiPER 1200GW up to 2.5.3-170306. This affects the function strcpy of the file /gofor
Information Disclosure when resetting device to factory default settings through powerline...
CVE-2025-59601
Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized
Pixa Bank 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to...
CVE-2026-49491
Pixa Bank 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract sensitive data by
In multiple functions, there is a possible desync in persistence due to an incorrect bounds check...
CVE-2026-28580
In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. This could lead to lo
Memory corruption in diagnostic services due to absence of input validation
CVE-2025-59611
Memory corruption in diagnostic services due to absence of input validation
Memory Corruption when processing device identifier strings that exceed the expected maximum length.
CVE-2025-59605
Memory Corruption when processing device identifier strings that exceed the expected maximum length.
In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption...
CVE-2026-0095
In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption within the privileged
A weakness has been identified in code-projects Hotel and Tourism Reservation System 1.0. The...
CVE-2026-10290
A weakness has been identified in code-projects Hotel and Tourism Reservation System 1.0. The affected element is an unk
In getCallingPackageName of Shared.java, there is a possible way to bypass activity start...
CVE-2026-0098
In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion...
CVE-2025-59606
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initi
In multiple locations, there is a possible way to bypass user interaction when pairing an LE...
CVE-2026-0097
In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent...
CVE-2025-59610
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-spa
In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from...
CVE-2026-0099
In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to
Memory Corruption when sending random number generator command with insufficient output buffer size.
CVE-2025-59614
Memory Corruption when sending random number generator command with insufficient output buffer size.
In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into...
CVE-2026-0094
In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to cert
In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow....
CVE-2026-0100
In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to loc
In multiple functions of AppOpsService.java, there is a possible missing permission check due to...
CVE-2026-28586
In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. T
A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of...
CVE-2026-10294
A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transa
A security vulnerability has been detected in Enderfga claw-orchestrator up to 3.7.0. The...
CVE-2026-10291
A security vulnerability has been detected in Enderfga claw-orchestrator up to 3.7.0. The impacted element is the functi