Lucene search
+L

7 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-46419

Malicious code in bioql PyPI...

7.1CVSS4.7AI score0.00185EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/09/08 12:00 a.m.•21 views

Google Android elevation of privilege vulnerability (CNVD-2025-29703)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a logic error in the updateState function in ContentProtectionTogglePreferenceController.java, which can be exploited by an attacker to elevate...

7.8CVSS7.2AI score0.00084EPSS
SaveExploits0References1
OSV
OSV
•added 2022/08/12 3:15 p.m.•14 views

CVE-2022-20294

In Content, there is a possible way to learn about an account present on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android...

5.5CVSS5.9AI score0.00095EPSS
SaveExploits0References1
Mend
Mend
•added 2019/07/30 8:32 p.m.•4 views

CVE-2019-5452

Bypass lock protection in the Nextcloud Android app prior to version 3.6.2 causes leaking of thumbnails when requesting the Android content provider although the lock protection was not solved...

2.4CVSS0.00434EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/30 12:00 a.m.•8 views

CVE-2019-5452: Improper Access Control

Bypass lock protection in the Nextcloud Android app prior to version 3.6.2 causes leaking of thumbnails when requesting the Android content provider although the lock protection was not solved...

2.4CVSS5.8AI score0.00434EPSS
SaveExploits1References2
OSV
OSV
•added 2016/04/18 12:59 a.m.•13 views

CVE-2016-2426

server/content/ContentService.java in the Framework component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for a GETACCOUNTS permission, which allows attackers to obtain sensitive information via a crafted application, aka internal...

5.5CVSS5.8AI score0.00388EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2011/11/29 12:00 a.m.•72 views

Android content:// Information Disclosure

Android Data Stealing Web PageClick: Malicious Link"; // Stage 1: Redirect to Stage 2 which will force a download of the HTML/JS payload, then a few seconds later redirect // to the payload. We load the payload using a Content Provider so...

4.3CVSS6.6AI score0.26952EPSS
SaveExploits9
Rows per page
Query Builder