CVE-2019-15392

CVE-2019-15392 affects the Asus ZenFone 4 Selfie. A pre-installed app with package name com.log.logservice (version 1) exposes an exported interface that allows any co-located app to modify a system property without proper authorization. This is a local issue (attack vector: local) enabling integ...

CVE-2019-15392

The Asus ZenFone 4 Selfie Android device with a build fingerprint of Android/sdm66064/sdm66064:8.1.0/OPM1/14.2016.1802.247-20180419:user/release-keys contains a pre-installed app with a package name of com.log.logservice app versionCode=1, versionName=1 that allows any app co-located on the devic...

CVE-2019-15391

The CVE-2019-15391 entry concerns the Asus ZenFone 4 Selfie. A pre-installed app with package name com.log.logservice (versionCode=1, versionName=1) exposes an interface that allows any app co-located on the device to modify a system property without proper authorization. This is a local-privileg...

CVE-2019-15391

The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WWPhone/ASUSX00LD1:8.1.0/OPM1.171019.011/15.0400.1809.405-0:user/release-keys contains a pre-installed app with a package name of com.log.logservice app versionCode=1, versionName=1 that allows any app co-located on the...

PT-2019-14133

Name of the Vulnerable Software and Affected Versions Asus ZenFone Max 4 Android device with a build fingerprint of asus/WW Phone/ASUS X00HD 4:7.1.1/NMF26F/14.2016.1712.367-20171225:user/release-keys Description The issue concerns a pre-installed app with a package name of com.asus.loguploaderpro...

CVE-2019-15391: Undefined Security Weakness

The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WWPhone/ASUSX00LD1:8.1.0/OPM1.171019.011/15.0400.1809.405-0:user/release-keys contains a pre-installed app with a package name of com.log.logservice app versionCode=1, versionName=1 that allows any app co-located on the...

CVE-2019-15397: Undefined Security Weakness

The Asus ZenFone Max 4 Android device with a build fingerprint of asus/WWPhone/ASUSX00HD4:7.1.1/NMF26F/14.2016.1803.373-20180308:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000020, versionName=7.0.0.4170901 that allows other...

PT-2019-14198

Name of the Vulnerable Software and Affected Versions Xiaomi Mi Pad 4 Android device with a build fingerprint of Xiaomi/clover/clover:8.1.0/OPM1.171019.019/V9.6.26.0.ODJCNFD:user/release-keys com.qualcomm.qti.callenhancement app version 8.1.0 Description The issue allows other pre-installed apps ...

PT-2019-14121

Name of the Vulnerable Software and Affected Versions Asus ZenFone 4 Selfie Android device with a build fingerprint of Android/sdm660 64/sdm660 64:8.1.0/OPM1/14.2016.1802.247-20180419:user/release-keys Description The issue concerns a pre-installed app with a package name of com.log.logservice th...

PT-2019-14127

Name of the Vulnerable Software and Affected Versions Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW Z01M/ASUS Z01M 1:7.1.1/NMF26F/WW user 11.40.208.77 20170922:user/release-keys Description The device contains a pre-installed app with a package name of...

CVE-2019-15469: Undefined Security Weakness

The Xiaomi Mi Pad 4 Android device with a build fingerprint of Xiaomi/clover/clover:8.1.0/OPM1.171019.019/V9.6.26.0.ODJCNFD:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app versionCode=27, versionName=8.1.0 that allows other pre-installed...

PT-2019-14120

Name of the Vulnerable Software and Affected Versions Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW Phone/ASUS X00LD 1:8.1.0/OPM1.171019.011/15.0400.1809.405-0:user/release-keys Description The issue concerns a pre-installed app with a package name of com.log.logservice...

PT-2019-14126

Name of the Vulnerable Software and Affected Versions Asus ZenFone Max 4 Android device with a build fingerprint of asus/WW Phone/ASUS X00HD 4:7.1.1/NMF26F/14.2016.1803.373-20180308:user/release-keys Description The issue concerns a pre-installed app with a package name of com.asus.loguploaderpro...

CVE-2019-15398: Undefined Security Weakness

The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WWZ01M/ASUSZ01M1:7.1.1/NMF26F/WWuser11.40.208.7720170922:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000015, versionName=7.0.0.3161222 that allows othe...

CVE-2019-15392: Undefined Security Weakness

The Asus ZenFone 4 Selfie Android device with a build fingerprint of Android/sdm66064/sdm66064:8.1.0/OPM1/14.2016.1802.247-20180419:user/release-keys contains a pre-installed app with a package name of com.log.logservice app versionCode=1, versionName=1 that allows any app co-located on the devic...

CVE-2019-15404: Undefined Security Weakness

The Asus ZenFone Max 4 Android device with a build fingerprint of asus/WWPhone/ASUSX00HD4:7.1.1/NMF26F/14.2016.1712.367-20171225:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000020, versionName=7.0.0.4170901 that allows other...

CVE-2019-15412: Undefined Security Weakness

The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WWZ01M/ASUSZ01M1:7.1.1/NMF26F/WW71.50.395.5720180913:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000020, versionName=7.0.0.4170901 that allows other...

PT-2019-14141

Name of the Vulnerable Software and Affected Versions Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW Z01M/ASUS Z01M 1:7.1.1/NMF26F/WW 71.50.395.57 20180913:user/release-keys Description The device contains a pre-installed app with a package name of...

GHSA-XM6J-X342-GWQ9 SilverStripe Versioned Files module Unpublished files are exposed publicly

In the Versioned Files module through 2.0.3 for SilverStripe 3.x, unpublished versions of files are publicly exposed to anyone who can guess their URL. This guess could be highly informed by a basic understanding of the symbiote/silverstripe-versionedfiles source code. Users who upgrade from...

SilverStripe Versioned Files module Unpublished files are exposed publicly

In the Versioned Files module through 2.0.3 for SilverStripe 3.x, unpublished versions of files are publicly exposed to anyone who can guess their URL. This guess could be highly informed by a basic understanding of the symbiote/silverstripe-versionedfiles source code. Users who upgrade from...