Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limits causing resource exhaustion.Check if you run itEPSS 0.09%Dec 8, 2025
- High7.8In multiple functions of BaseBundle.java, there is a possible way to execute arbitrary code due to a logic error in the code.Check if you run itEPSS 0.10%Dec 8, 2025
- High7.8In connectInternal of MediaBrowser.java, there is a possible way to access while in use permission while the app is in background due to a logic error in the code.Check if you run itEPSS 0.13%Dec 8, 2025
- Medium5.5In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permanent denial of service due to resource exhaustion.Check if you run itEPSS 0.09%Dec 8, 2025
- High7.8In multiple functions of CertInstaller.java, there is a possible way to install certificates due to a permissions bypass.Check if you run itEPSS 0.07%Dec 8, 2025
- High7.8In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in the background due to FGS while-in-use abuse.Check if you run itEPSS 0.09%Dec 8, 2025
- High7.8In multiple locations, there is a possible permission bypass due to a confused deputy.Check if you run itEPSS 0.13%Dec 8, 2025
- High7.8In multiple locations, there is a possible way to bypass the cross profile intent filter due to a logic error in the code.Check if you run itEPSS 0.14%Dec 8, 2025
- High7.0In multiple locations, there is a possible intent filter bypass due to a race condition.Check if you run itEPSS 0.10%Dec 8, 2025
- High7.8In grantAllowlistedPackagePermissions of SettingsSliceProvider.java, there is a possible way for a third party app to modify secure settings due to a confused deputy.Check if you run itEPSS 0.09%Dec 8, 2025
- High7.8In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications when not associated to a companion device due to improper inpuCheck if you run itEPSS 0.10%Dec 8, 2025
- High7.8In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the device due to a logic error in the code.Check if you run itEPSS 0.10%Dec 8, 2025
- High7.8In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the device due to a logic error in the code.Check if you run itEPSS 0.10%Dec 8, 2025
- Medium6.7In ensureBound of RemotePrintService.java, there is a possible way for a background app to keep foreground permissions due to a permissions bypass.Check if you run itEPSS 0.09%Dec 8, 2025
- Medium6.7In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input validation.Check if you run itEPSS 0.10%Dec 8, 2025
- High7.8In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy.Check if you run itEPSS 0.08%Dec 8, 2025
- Medium6.9A vulnerability was detected in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.48%Dec 8, 2025
- Medium6.9A security vulnerability has been detected in code-projects Online Ordering System 1.0.Check if you run itEPSS 0.39%Dec 8, 2025
- Medium6.9A weakness has been identified in code-projects Online Ordering System 1.0.Check if you run itEPSS 0.39%Dec 8, 2025
- Medium6.9A security flaw has been discovered in code-projects Online Ordering System 1.0.Check if you run itEPSS 0.39%Dec 8, 2025
- Medium6.9A vulnerability was identified in code-projects Simple Shopping Cart 1.0.Check if you run itEPSS 0.39%Dec 8, 2025
- Medium5.3A vulnerability was determined in code-projects Simple Shopping Cart 1.0.Check if you run itEPSS 0.32%Dec 8, 2025
- Medium5.3A vulnerability was found in code-projects Simple Shopping Cart 1.0.Check if you run itEPSS 0.32%Dec 8, 2025
- Medium6.9A vulnerability has been found in IdeaCMS up to 1.8.Check if you run itEPSS 0.39%Dec 8, 2025
- High8.3In affected versions, vulnerability-lookup handled user-controlled content in comments and bundles in an unsafe way, which could lead to stored Cross-Site Scripting (XSS).Check if you run itEPSS 0.29%Dec 8, 2025
Sort