Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2021-06-11 CVE-2021-34679 Unspecified vulnerability in Thycotic Password Reset Server
Thycotic Password Reset Server before 5.3.0 allows credential disclosure.
network
low complexity
thycotic
7.5
2021-06-11 CVE-2020-7860 Integer Overflow or Wraparound vulnerability in Unegg Project Unegg
UnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by UnEGG.
local
low complexity
unegg-project CWE-190
7.8
2021-06-11 CVE-2021-0466 Use of Insufficiently Random Values vulnerability in Google Android 10.0
In startIpClient of ClientModeImpl.java, there is a possible identifier which could be used to track a device.
network
low complexity
google CWE-330
7.5
2021-06-11 CVE-2021-0472 Incorrect Authorization vulnerability in Google Android 10.0/11.0/9.0
In shouldLockKeyguard of LockTaskController.java, there is a possible way to exit App Pinning without a PIN due to a permissions bypass.
local
low complexity
google CWE-863
7.8
2021-06-11 CVE-2021-0473 Use of Uninitialized Resource vulnerability in Google Android
In rw_t3t_process_error of rw_t3t.cc, there is a possible double free due to uninitialized data.
low complexity
google CWE-908
8.8
2021-06-11 CVE-2021-0475 Use After Free vulnerability in Google Android 10.0/11.0
In on_l2cap_data_ind of btif_sock_l2cap.cc, there is possible memory corruption due to a use after free.
low complexity
google CWE-416
8.8
2021-06-11 CVE-2021-0476 Race Condition vulnerability in Google Android 10.0/11.0/9.0
In FindOrCreatePeer of btif_av.cc, there is a possible use after free due to a race condition.
local
high complexity
google CWE-362
7.0
2021-06-11 CVE-2021-0477 Incorrect Permission Assignment for Critical Resource vulnerability in Google Android
In notifyScreenshotError of ScreenshotNotificationsController.java, there is a possible permission bypass due to an unsafe PendingIntent.
local
low complexity
google CWE-732
7.8
2021-06-11 CVE-2021-0481 Improper Input Validation vulnerability in Google Android
In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler.
local
low complexity
google CWE-20
7.8
2021-06-11 CVE-2021-0482 Use After Free vulnerability in Google Android 11.0
In BinderDiedCallback of MediaCodec.cpp, there is a possible memory corruption due to a use after free.
local
high complexity
google CWE-416
7.0