An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) which allow an unauthenticated attacker to induce an…

A cross-site scripting (XSS) vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers (with administrative access) to inject arbitrary JavaScript within the title of…

A cross-site scripting (XSS) vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers (with administrative access) to inject arbitrary JavaScript within the description of…

In Settings, there is a possible way for an application without permissions to read content of WiFi QR codes due to a missing permission check.…

In PackageManager, there is a possible installed package disclosure due to a missing permission check. This could lead to local information disclosure with no additional…

In PackageManager, there is a possible package installation disclosure due to a missing permission check. This could lead to local information disclosure with User execution…

In WifiP2pManager, there is a possible toobtain WiFi P2P MAC address without user consent due to missing permission check. This could lead to local information…

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with…

In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. This could lead to local escalation of privilege with…

In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no…