Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2024-11-20 CVE-2018-9472 Integer Overflow or Wraparound vulnerability in Google Android
In xmlMemStrdupLoc of xmlmemory.c, there is a possible out-of-bounds write due to an integer overflow.
network
low complexity
google CWE-190
8.8
2024-11-20 CVE-2018-9474 Deserialization of Untrusted Data vulnerability in Google Android
In writeToParcel of MediaPlayer.java, there is a possible serialization/deserialization mismatch due to improper input validation.
local
low complexity
google CWE-502
7.8
2024-11-20 CVE-2018-9475 Out-of-bounds Write vulnerability in Google Android
In HeadsetInterface::ClccResponse of btif_hf.cc, there is a possible out of bounds stack write due to a missing bounds check.
low complexity
google CWE-787
8.8
2024-11-20 CVE-2018-9477 Missing Authorization vulnerability in Google Android 8.0/8.1
In the development options section of the Settings app, there is a possible authentication bypass due to a missing permission check.
local
low complexity
google CWE-862
7.8
2024-11-20 CVE-2018-9484 Out-of-bounds Read vulnerability in Google Android
In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out of bounds read due to a missing bounds check.
network
low complexity
google CWE-125
7.5
2024-11-20 CVE-2018-9468 Unspecified vulnerability in Google Android
In query of DownloadManager.java, there is a possible read/write of arbitrary files due to a permissions bypass.
local
low complexity
google
7.1
2024-11-20 CVE-2018-9469 Missing Authorization vulnerability in Google Android
In multiple functions of ShortcutService.java, there is a possible creation of a spoofed shortcut due to a missing permission check.
local
low complexity
google CWE-862
7.8
2024-11-20 CVE-2024-11484 Unspecified vulnerability in Code4Berry Decoration Management System 1.0
A vulnerability classified as critical was found in Code4Berry Decoration Management System 1.0.
network
low complexity
code4berry
8.8
2024-11-20 CVE-2024-11485 Unspecified vulnerability in Code4Berry Decoration Management System 1.0
A vulnerability, which was classified as critical, has been found in Code4Berry Decoration Management System 1.0.
network
low complexity
code4berry
8.1
2024-11-20 CVE-2024-11487 SQL Injection vulnerability in Code4Berry Decoration Management System 1.0
A vulnerability has been found in Code4Berry Decoration Management System 1.0 and classified as critical.
network
low complexity
code4berry CWE-89
8.8