A vulnerability was detected in UTT HiPER 1200GW up to 2.5.3-170306. This affects the function...
CVE-2026-10292
A vulnerability was detected in UTT HiPER 1200GW up to 2.5.3-170306. This affects the function strcpy of the file /gofor
#severity:high
共收录 5509 条相关情报。
← 返回所有主题Pixa Bank 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to...
CVE-2026-49491
Pixa Bank 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract sensitive data by
In multiple functions, there is a possible desync in persistence due to an incorrect bounds check...
CVE-2026-28580
In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. This could lead to lo
Memory Corruption when processing device identifier strings that exceed the expected maximum length.
CVE-2025-59605
Memory Corruption when processing device identifier strings that exceed the expected maximum length.
In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption...
CVE-2026-0095
In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption within the privileged
In getCallingPackageName of Shared.java, there is a possible way to bypass activity start...
CVE-2026-0098
In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion...
CVE-2025-59606
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initi
In multiple locations, there is a possible way to bypass user interaction when pairing an LE...
CVE-2026-0097
In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error
In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from...
CVE-2026-0099
In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to
In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into...
CVE-2026-0094
In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to cert
In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow....
CVE-2026-0100
In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to loc
In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into...
CVE-2026-0096
In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to mi
Memory Corruption when running a memory copy operation due to invalid writes caused by a null...
CVE-2025-59604
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.
In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a...
CVE-2026-28577
In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This
In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due...
CVE-2026-0059
In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overfl
In multiple functions of PackageInstallerService.java, there is a possible way to install...
CVE-2026-0089
In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a missi
In multiple locations, there is a possible way to execute code in the launcher process due to an...
CVE-2026-0091
In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell u
praisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id}
CVE-2026-47412
## Summary **Type:** Authorization bypass enabling destructive action. The `DELETE /workspaces/{workspace_id}` endpoint
praisonai-platform: Issue endpoints accept any issue_id without workspace ownership check, cross-workspace read/update/delete IDOR
CVE-2026-47415
## Summary **Type:** Insecure Direct Object Reference. The issue CRUD endpoints (`GET / PATCH / DELETE /workspaces/{wor
praisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment read and post IDOR
CVE-2026-47417
## Summary **Type:** Insecure Direct Object Reference. The comment endpoints (`POST /workspaces/{workspace_id}/issues/{