Vulnerabilities (CVE)

Total 421468 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-29745 1 Bestweather Project 1 Bestweather 2026-06-17 N/A 7.1 HIGH
An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database.
CVE-2023-29743 1 Bestweather Project 1 Bestweather 2026-06-17 N/A 7.5 HIGH
An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database.
CVE-2023-29742 1 Bestweather Project 1 Bestweather 2026-06-17 N/A 7.8 HIGH
An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a code execution attack by manipulating the database.
CVE-2023-29741 1 Bestweather Project 1 Bestweather 2026-06-17 N/A 9.8 CRITICAL
An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause an escalation of privileges attack by manipulating the database.
CVE-2023-29740 1 Amdroidapp 1 Alarm Clock For Heavy Sleepers 2026-06-17 N/A 7.5 HIGH
An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause a denial of service attack by manipulating the database.
CVE-2023-29739 1 Amdroidapp 1 Alarm Clock For Heavy Sleepers 2026-06-17 N/A 9.8 CRITICAL
An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the component.
CVE-2023-29738 1 Wavekeyboard 1 Wave Animated Keyboard Emoji 2026-06-17 N/A 7.8 HIGH
An issue found in Wave Animated Keyboard Emoji v.1.70.7 for Android allows a local attacker to cause code execution and escalation of Privileges via the database files.
CVE-2023-29737 1 Wavekeyboard 1 Wave Animated Keyboard Emoji 2026-06-17 N/A 5.5 MEDIUM
An issue found in Wave Animated Keyboard Emoji v.1.70.7 for Android allows a local attacker to cause a denial of service via the database files.
CVE-2023-29736 1 Timmystudios 1 Keyboard Themes 2026-06-17 N/A 9.8 CRITICAL
Keyboard Themes 1.275.1.164 for Android contains a dictionary traversal vulnerability that allows unauthorized apps to overwrite arbitrary files in its internal storage and achieve arbitrary code execution.
CVE-2023-29735 1 Mwm 1 Edjing Mix 2026-06-17 N/A 5.5 MEDIUM
An issue found in edjing Mix v.7.09.01 for Android allows a local attacker to cause a denial of service via the database files.
CVE-2023-29734 1 Mwm 1 Edjing Mix 2026-06-17 N/A 9.8 CRITICAL
An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database.
CVE-2023-29733 1 Dualspace 1 Lock Master 2026-06-17 N/A 7.8 HIGH
The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. These files hold data that affects many app functions. Malicious modifications by unauthorized apps can cause security issues, such as functionality manipulation, resulting in a severe escalation of privilege attack.
CVE-2023-29732 1 Loka 1 Solive 2026-06-17 N/A 9.8 CRITICAL
SoLive 1.6.14 thru 1.6.20 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the application is opened. Depending on how the data is used, this can result in various attack consequences, such as ad display exceptions.
CVE-2023-29731 1 Loka 1 Solive 2026-06-17 N/A 7.5 HIGH
SoLive 1.6.14 thru 1.6.20 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. When an attacker injects too much data, the application will trigger an OOM error and crash at startup, resulting in a persistent denial of service.
CVE-2023-29728 1 Applika 1 Call Blocker 2026-06-17 N/A 9.8 CRITICAL
The Call Blocker application 6.6.3 for Android allows attackers to tamper with feature-related data, resulting in a severe elevation of privilege attack.
CVE-2023-29727 1 Applika 1 Call Blocker 2026-06-17 N/A 9.8 CRITICAL
The Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed components to delete data stored in its database that is related to user privacy settings and affects the implementation of the normal functionality of the application. An attacker can use this to cause an escalation of privilege attack.
CVE-2023-29726 1 Applika 1 Call Blocker 2026-06-17 N/A 7.5 HIGH
The Call Blocker application 6.6.3 for Android incorrectly opens a key component that an attacker can use to inject large amounts of dirty data into the application's database. When the application starts, it loads the data from the database into memory. Once the attacker injects too much data, the application triggers an OOM error and crashes, resulting in a persistent denial of service.
CVE-2023-29723 1 Glitter Unicorn Wallpaper Project 1 Glitter Unicorn Wallpaper 2026-06-17 N/A 7.5 HIGH
The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting data, the attacker can force the application to load malicious image URLs and display them in the UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persistent denial of service attack.
CVE-2023-29722 1 Glitter Unicorn Wallpaper Project 1 Glitter Unicorn Wallpaper 2026-06-17 N/A 9.1 CRITICAL
The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker could tamper with this data to cause an escalation of privilege attack.
CVE-2023-29721 1 Sofawiki Project 1 Sofawiki 2026-06-17 N/A 9.8 CRITICAL
SofaWiki <= 3.8.9 has a file upload vulnerability that leads to command execution.