Total
421867 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-29749 | 1 Yandex | 1 Navigator | 2026-06-17 | N/A | 7.8 HIGH |
| An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files. | |||||
| CVE-2023-29748 | 1 Story Saver For Instagram - Video Downloader Project | 1 Story Saver For Instagram - Video Downloader | 2026-06-17 | N/A | 7.5 HIGH |
| Story Saver for Instragram - Video Downloader 1.0.6 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. When an attacker injects too much data, the application will trigger an OOM error and crash at startup, resulting in a persistent denial of service. | |||||
| CVE-2023-29747 | 1 Story Saver For Instagram - Video Downloader Project | 1 Story Saver For Instagram - Video Downloader | 2026-06-17 | N/A | 9.8 CRITICAL |
| Story Saver for Instragram - Video Downloader 1.0.6 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the application is opened. Depending on how the data is used, this can result in various attack consequences, such as ad display exceptions. | |||||
| CVE-2023-29746 | 1 Thethaiger | 1 The Thaiger | 2026-06-17 | N/A | 9.8 CRITICAL |
| An issue found in The Thaiger v.1.2 for Android allows unauthorized apps to cause a code execution attack by manipulating the SharedPreference files. | |||||
| CVE-2023-29745 | 1 Bestweather Project | 1 Bestweather | 2026-06-17 | N/A | 7.1 HIGH |
| An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database. | |||||
| CVE-2023-29743 | 1 Bestweather Project | 1 Bestweather | 2026-06-17 | N/A | 7.5 HIGH |
| An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database. | |||||
| CVE-2023-29742 | 1 Bestweather Project | 1 Bestweather | 2026-06-17 | N/A | 7.8 HIGH |
| An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a code execution attack by manipulating the database. | |||||
| CVE-2023-29741 | 1 Bestweather Project | 1 Bestweather | 2026-06-17 | N/A | 9.8 CRITICAL |
| An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause an escalation of privileges attack by manipulating the database. | |||||
| CVE-2023-29740 | 1 Amdroidapp | 1 Alarm Clock For Heavy Sleepers | 2026-06-17 | N/A | 7.5 HIGH |
| An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause a denial of service attack by manipulating the database. | |||||
| CVE-2023-29739 | 1 Amdroidapp | 1 Alarm Clock For Heavy Sleepers | 2026-06-17 | N/A | 9.8 CRITICAL |
| An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the component. | |||||
| CVE-2023-29738 | 1 Wavekeyboard | 1 Wave Animated Keyboard Emoji | 2026-06-17 | N/A | 7.8 HIGH |
| An issue found in Wave Animated Keyboard Emoji v.1.70.7 for Android allows a local attacker to cause code execution and escalation of Privileges via the database files. | |||||
| CVE-2023-29737 | 1 Wavekeyboard | 1 Wave Animated Keyboard Emoji | 2026-06-17 | N/A | 5.5 MEDIUM |
| An issue found in Wave Animated Keyboard Emoji v.1.70.7 for Android allows a local attacker to cause a denial of service via the database files. | |||||
| CVE-2023-29736 | 1 Timmystudios | 1 Keyboard Themes | 2026-06-17 | N/A | 9.8 CRITICAL |
| Keyboard Themes 1.275.1.164 for Android contains a dictionary traversal vulnerability that allows unauthorized apps to overwrite arbitrary files in its internal storage and achieve arbitrary code execution. | |||||
| CVE-2023-29735 | 1 Mwm | 1 Edjing Mix | 2026-06-17 | N/A | 5.5 MEDIUM |
| An issue found in edjing Mix v.7.09.01 for Android allows a local attacker to cause a denial of service via the database files. | |||||
| CVE-2023-29734 | 1 Mwm | 1 Edjing Mix | 2026-06-17 | N/A | 9.8 CRITICAL |
| An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database. | |||||
| CVE-2023-29733 | 1 Dualspace | 1 Lock Master | 2026-06-17 | N/A | 7.8 HIGH |
| The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. These files hold data that affects many app functions. Malicious modifications by unauthorized apps can cause security issues, such as functionality manipulation, resulting in a severe escalation of privilege attack. | |||||
| CVE-2023-29732 | 1 Loka | 1 Solive | 2026-06-17 | N/A | 9.8 CRITICAL |
| SoLive 1.6.14 thru 1.6.20 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the application is opened. Depending on how the data is used, this can result in various attack consequences, such as ad display exceptions. | |||||
| CVE-2023-29731 | 1 Loka | 1 Solive | 2026-06-17 | N/A | 7.5 HIGH |
| SoLive 1.6.14 thru 1.6.20 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. When an attacker injects too much data, the application will trigger an OOM error and crash at startup, resulting in a persistent denial of service. | |||||
| CVE-2023-29728 | 1 Applika | 1 Call Blocker | 2026-06-17 | N/A | 9.8 CRITICAL |
| The Call Blocker application 6.6.3 for Android allows attackers to tamper with feature-related data, resulting in a severe elevation of privilege attack. | |||||
| CVE-2023-29727 | 1 Applika | 1 Call Blocker | 2026-06-17 | N/A | 9.8 CRITICAL |
| The Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed components to delete data stored in its database that is related to user privacy settings and affects the implementation of the normal functionality of the application. An attacker can use this to cause an escalation of privilege attack. | |||||