Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

google android 2.2.1 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2013-7373
Android prior to 4.4 does not properly arrange for seeding of the OpenSSL PRNG, which makes it easier for malicious users to defeat cryptographic protection mechanisms by leveraging use of the PRNG within multiple applications.
Google Android 1.0Google Android 1.1Google Android 1.5Google Android 1.6Google Android 2.3.4Google Android 2.3.5Google Android 2.3.6Google Android 2.3.7Google Android 4.1.2Google Android 4.2Google Android 4.2.1Google Android 4.2.2Google Android 2.0Google Android 2.1Google Android 2.3Google Android 2.3.2Google Android 3.1Google Android 3.2.1Google Android 4.0.1Google Android 4.0.3Google Android 4.1Google Android 4.3
7.5
CVSSv2
CVE-2014-8507
Multiple SQL injection vulnerabilities in the queryLastApp method in packages/WAPPushManager/src/com/android/smspush/WapPushManager.java in the WAPPushManager module in Android prior to 5.0.0 allow remote malicious users to execute arbitrary SQL commands, and consequently launch ...
Google Android 4.0.3Google Android 4.0.2Google Android 4.0.1Google Android 4.0Google Android 2.3.2Google Android 2.3.1Google Android 4.4Google Android 4.3.1Google Android 4.3Google Android 4.2.2Google Android 4.2.1Google Android 3.2Google Android 3.1Google Android 3.0Google Android 2.3.7Google Android 2.1Google Android 2.0.1Google Android 2.0Google Android 1.6Google Android 2.3Google Android 2.2.3Google Android
3.3
CVSSv2
CVE-2014-8610
AndroidManifest.xml in Android prior to 5.0.0 does not require the SEND_SMS permission for the SmsReceiver receiver, which allows malicious users to send stored SMS messages, and consequently transmit arbitrary new draft SMS messages or trigger additional per-message charges from...
Google Android 4.4.3Google Android 1.5Google Android 1.6Google Android 2.0Google Android 2.3.5Google Android 2.3.6Google Android 2.3.7Google Android 3.0Google Android 4.1.2Google Android 4.2Google Android 4.2.1Google Android 4.2.2Google Android 4.3Google Android 1.1Google Android 2.1Google Android 2.2Google Android 2.3Google Android 2.3.2Google Android 2.3.4Google Android 3.1Google Android 3.2.1Google Android 4.0.3
7.5
CVSSv2
CVE-2016-1155
HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 up to and including 6.0 allows remote malicious users to execute arbitrary scripts or set arbitrary values in cookies.
Google Android 2.2Google Android 2.2.1Google Android 2.2.2Google Android 2.2.3Google Android 3.2.1Google Android 3.2.2Google Android 3.2.4Google Android 3.2.6Google Android 4.4.1Google Android 4.4.2Google Android 4.4.3Google Android 4.4.4Google Android 2.3.3Google Android 2.3.4Google Android 2.3.5Google Android 2.3.6Google Android 4.0.4Google Android 4.1Google Android 4.1.2Google Android 4.2Google Android 4.2.1Google Android 5.1.0
7.2
CVSSv2
CVE-2014-7911
luni/src/main/java/java/io/ObjectInputStream.java in the java.io.ObjectInputStream implementation in Android prior to 5.0.0 does not verify that deserialization will result in an object that met the requirements for serialization, which allows malicious users to execute arbitrary...
Google Android 2.2.3Google Android 2.0.1Google Android 1.0Google Android 3.2.6Google Android 4.2Google Android 1.6Google Android 2.1Google Android 4.1Google Android 3.2.4Google Android 3.2Google Android 3.2.2Google Android 4.0.2Google Android 2.3Google Android 4.4.3Google Android 2.3.6Google Android 4.0.4Google Android 4.3Google Android 4.0.1Google Android 2.3.3Google Android 3.0Google Android 2.0Google Android 4.2.1
6.8
CVSSv2
CVE-2012-2871
libxml2 2.9.0-rc1 and previous versions, as used in Google Chrome prior to 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which allows remote malicious users to cause a denial of service or possibly have unknown other ...
Apple Iphone Os 6.1.2Apple Iphone Os 3.0Apple Iphone Os 3.2Apple Iphone Os 3.1.3Apple Iphone Os 1.0.2Apple Iphone Os 4.3.2Apple Iphone Os 4.0.2Apple Iphone OsApple Iphone Os 2.2Apple Iphone Os 1.1.1Apple Iphone Os 6.1.3Apple Iphone Os 5.1Apple Iphone Os 4.2.8Apple Iphone Os 6.0.2Apple Iphone Os 4.1Apple Iphone Os 2.0.0Apple Iphone Os 3.1.2Apple Iphone Os 3.0.1Apple Iphone Os 4.3.1Apple Iphone Os 4.2.5Apple Iphone Os 1.1.2Apple Iphone Os 3.1
10
CVSSv2
CVE-2010-1119
Use-after-free vulnerability in WebKit in Apple Safari prior to 5.0 on Mac OS X 10.5 up to and including 10.6 and Windows, Safari prior to 4.1 on Mac OS X 10.4, and Safari on Apple iPhone OS allows remote malicious users to execute arbitrary code or cause a denial of service (app...
Apple Safari 4.0.4Apple SafariApple Safari 3.0.1Apple Safari 3.0.1bApple Safari 3.1Apple Safari 3.1.0Apple Safari 3.2.3Apple Safari 2Apple Safari 2.0.3Apple Safari 1.0.2Apple Safari 1.0.3Apple Safari 1.1.1Apple Safari 1.2Apple Safari 1.3.0Apple Safari 1.3.1Apple Safari 4.0.0bApple Safari 4.0Apple Safari 4.1Apple Safari 3.0.2Apple Safari 3.0.2bApple Safari 3.1.0bApple Safari 3.1.1
2.1
CVSSv2
CVE-2020-8908
A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on unix-like systems, the ...
Google GuavaQuarkus QuarkusOracle Peoplesoft Enterprise Peopletools 8.57Oracle Data Integrator 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Weblogic Server 14.1.1.0.0Oracle Data Integrator 12.2.1.4.0Oracle Nosql DatabaseOracle Commerce Guided Search 11.3.2Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Communications Cloud Native Core Network Slice Selection Function 1.2.1Oracle Retail Customer Management And Segmentation FoundationOracle Communications Pricing Design Center 12.0.0.4.0Oracle Communications Pricing Design Center 12.0.0.5.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Primavera Unifier 19.12Oracle Primavera Unifier 20.12Oracle Communications Cloud Native Core Network Repository Function 1.14.0Oracle Primavera Unifier 21.12Netapp Active Iq Unified Manager -
5
CVSSv2
CVE-2014-3569
The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected ...
Openssl Openssl 1.0.1j
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook