Lucene search
K

324 matches found

CNVD
CNVD
added 2017/02/10 12:0 a.m.2 views

Google Android Framework APIs Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in Google Android Framework APIs. Attackers use this vulnerability to obtain sensitive information and launch further attacks...

5.5CVSS6.1AI score0.00109EPSS
Exploits0References1
CNVD
CNVD
added 2017/02/10 12:0 a.m.3 views

Google Android Framework APIs elevation of privilege vulnerability (CNVD-2017-01458)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. Google Android Framework APIs elevation of privilege vulnerability. An attacker can exploit the vulnerability to execute arbitrary code with elevated privileges...

9.3CVSS8.1AI score0.0144EPSS
Exploits5References1
UbuntuCve
UbuntuCve
added 2017/02/08 3:59 p.m.15 views

CVE-2017-0421

An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application...

5.5CVSS6.5AI score0.00109EPSS
Exploits0References2
OSV
OSV
added 2017/02/08 3:59 p.m.0 views

CVE-2017-0411

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

7.8CVSS6AI score
Exploits0References4
Cvelist
Cvelist
added 2017/02/08 3:0 p.m.13 views

CVE-2017-0410

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

7.3AI score0.00063EPSS
Exploits0References3
CNVD
CNVD
added 2017/01/13 12:0 a.m.2 views

Google Android Framework APIs Remote Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Framework APIs are one of the API components used to create the framework. A remote elevation of privilege vulnerability exists in the Google Android Framework APIs. A remote...

9.3CVSS8AI score0.00049EPSS
Exploits0References1
CNVD
CNVD
added 2016/12/13 12:0 a.m.2 views

Google Android Framework API elevation of privilege vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA for short. The Framework API is one of the API components used to create the framework. An elevation of privilege vulnerability exists in the Framework API in Android. An attacker c...

4.3CVSS7.3AI score0.00043EPSS
Exploits0References1
OSV
OSV
added 2016/11/25 4:59 p.m.1 views

CVE-2016-6715

An elevation of privilege vulnerability in the Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could allow a local malicious application to record audio without the user's permission. This issue is rated as...

5.5CVSS7.3AI score
Exploits0References2
OSV
OSV
added 2016/11/25 4:59 p.m.0 views

UBUNTU-CVE-2016-6715

An elevation of privilege vulnerability in the Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could allow a local malicious application to record audio without the user's permission. This issue is rated as...

5.5CVSS7.3AI score0.00041EPSS
Exploits0References3
NVD
NVD
added 2016/10/31 10:59 a.m.10 views

CVE-2016-7988

On Samsung Galaxy S4 through S7 devices, absence of permissions on the BroadcastReceiver responsible for handling the com.Samsung.android.intent.action.SETWIFI intent leads to unsolicited configuration messages being handled by wifi-service.jar within the Android Framework, a subset of...

7.8CVSS7.2AI score0.00091EPSS
Exploits0References2
Prion
Prion
added 2016/10/31 10:59 a.m.14 views

Code injection

On Samsung Galaxy S4 through S7 devices, absence of permissions on the BroadcastReceiver responsible for handling the com.Samsung.android.intent.action.SETWIFI intent leads to unsolicited configuration messages being handled by wifi-service.jar within the Android Framework, a subset of...

7.8CVSS6.8AI score0.00091EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2016/10/31 10:0 a.m.15 views

CVE-2016-7988

On Samsung Galaxy S4 through S7 devices, absence of permissions on the BroadcastReceiver responsible for handling the com.Samsung.android.intent.action.SETWIFI intent leads to unsolicited configuration messages being handled by wifi-service.jar within the Android Framework, a subset of...

7.2AI score0.00091EPSS
Exploits0References2
CVE
CVE
added 2016/10/31 10:0 a.m.35 views

CVE-2016-7988

The CVE describes an issue on Samsung Galaxy devices (S4–S7) where the BroadcastReceiver for com.[Samsung].android.intent.action.SET_WIFI lacks required permissions. This permits unsolicited configuration messages to be processed by wifi-service.jar within the Android Framework, as part of the vu...

7.8CVSS7.2AI score0.00091EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2016/10/13 12:0 a.m.2 views

Android framework APIs elevation of privilege vulnerability (CNVD-2016-09514)

Android is an open source operating system based on Linux. Android's framework APIs have security vulnerabilities that allow remote attackers to build malicious applications with elevated privileges...

9.3CVSS7.2AI score0.00135EPSS
Exploits0References1
CNVD
CNVD
added 2016/10/13 12:0 a.m.3 views

Android Framework Listener Elevation of Privilege Vulnerability

Android is an open source operating system based on Linux. A security vulnerability in the libsysutils/src/FrameworkListener.cpp file in Android's Framework Listener allows remote attackers to exploit the vulnerability to build malicious applications with elevated privileges...

9.3CVSS7AI score0.00059EPSS
Exploits0References1
OSV
OSV
added 2016/10/10 10:59 a.m.0 views

CVE-2016-3912

The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allow attackers to gain privileges via a crafted application, aka internal bug 30202481...

7.8CVSS5.8AI score
Exploits0References3
OSV
OSV
added 2016/10/10 10:59 a.m.2 views

UBUNTU-CVE-2016-3912

The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allow attackers to gain privileges via a crafted application, aka internal bug 30202481...

7.8CVSS7.1AI score0.00135EPSS
Exploits0References4
OSV
OSV
added 2016/08/05 8:59 p.m.1 views

UBUNTU-CVE-2016-3832

The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 do not ensure that package data originated from the Package Manager, which allows attackers to bypass an unspecified protection mechanism via a crafted application, aka internal bug...

7.8CVSS7.2AI score0.00074EPSS
Exploits0References4
CNVD
CNVD
added 2016/08/05 12:0 a.m.2 views

Google Android Framework APIs Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. There is a security vulnerability in the Android Framework APIs, which can be exploited by remote attackers to build special applications, induce application parsing, and elevate...

8.3CVSS7AI score0.00074EPSS
Exploits0References1
CNVD
CNVD
added 2016/08/04 12:0 a.m.1 views

Android Framework APIs Component Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Framework APIs are one of the API components used to create the framework. A power lifting vulnerability exists in the Framework APIs component in Android. An attacker can exploit...

7.5CVSS6.8AI score0.00155EPSS
Exploits0References1
Rows per page
Query Builder