Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data.Check this weekEPSS 18.00%May 30, 2025
- Medium6.9Android based smartphones from vendors such as Ulefone and Krüger&Matz contain "com.pri.factorytest" application preloaded onto devices during manufacturing process.Check if you run itEPSS 0.19%May 30, 2025
- High7.5Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions Remote Desktop Manager allows an authenticated user to gain unauthorizCheck if you run itEPSS 0.57%May 29, 2025
- Medium6.5Inappropriate implementation in Messages in Google Chrome on Android prior to 137.0.7151.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perfCheck this weekEPSS 42.00%May 27, 2025
- Medium5.5In the function process_crypto_cmd, the values of ptrs[i] can be potentially equal to NULL which is valid value after calling slice_map_array().Check this weekEPSS 10.00%May 27, 2025
- High8.4There is a possible bypass of carrier restrictions due to an unusual root cause.Check this weekEPSS 11.00%May 27, 2025
- Medium5.1There is a possible disclosure of Bluetooth adapter details due to a permissions bypass.Check this weekEPSS 10.00%May 27, 2025
- Medium4.6A vulnerability was identified in PhonePe App 25.03.21.0 on Android.Check if you run itEPSS 0.18%May 25, 2025
- Critical9.1PrinterShare Android application allows the capture of Gmail authentication tokens that can be reused to access a user's Gmail account without proper authorization.Check this weekEPSS 30.00%May 23, 2025
- Medium4.7Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive dataCheck if you run itEPSS 0.21%May 23, 2025
- Medium6.9Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.Check this weekEPSS 46.00%May 21, 2025
- High8.3Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.Check this weekEPSS 82.00%May 21, 2025
- High8.2Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.Check this weekEPSS 57.00%May 21, 2025
- Medium5.2An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable theCheck this weekEPSS 14.00%May 14, 2025
- Medium4.6An issue in realme GT 2 (RMX3311) running Android 14 with realme UI 5.0 allows a physically proximate attacker to obtain sensitive information via the show app only setting functioCheck this weekEPSS 23.00%May 14, 2025
- High8.4Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to execute arbitrary code.Check if you run itEPSS 8.00%May 7, 2025
- Critical9.3SQL injection in TCMAN's GIM v11.Check if you run itEPSS 0.44%May 6, 2025
- High7.8Memory corruption while reading the FW response from the shared queue.Check this weekEPSS 11.00%May 6, 2025
- High7.5Transient DOS while parsing per STA profile in ML IE.Check this weekEPSS 35.00%May 6, 2025
- High8.2Memory corruption while decoding of OTA messages from T3448 IE.Check this weekEPSS 29.00%May 6, 2025
- High7.8Memory corruption during the FRS UDS generation process.Check this weekEPSS 11.00%May 6, 2025
- High7.8Memory corruption while reading secure file.Check this weekEPSS 11.00%May 6, 2025
- High8.6Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile.Check if you run itEPSS 0.32%May 5, 2025
- Medium6.5The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to limited privilege escalation in all versions up to, and including, 4.17.4.Check if you run itEPSS 0.34%May 2, 2025
- Medium5.3A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat.Check if you run itEPSS 0.33%Apr 29, 2025