Lucene search
K

324 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2017-0667

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37478824...

9.3CVSS7.6AI score0.00035EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2017-0670

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36104177...

5.5CVSS6.3AI score0.00044EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2017-0808

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability in the Android framework file system. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62301183...

7.5CVSS7.6AI score0.00161EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2016-3832

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 do not ensure that package data originated fro...

8.3CVSS7.6AI score0.00074EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2017-0666

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:...

9.3CVSS7.6AI score0.00035EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2017-0665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:...

9.3CVSS7.6AI score0.00035EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2016-3912

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allow attackers to gain...

9.3CVSS7.5AI score0.00135EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/09/05 5:27 a.m.1 views

CVE-2023-21466

PendingIntent hijacking vulnerability in CertificatePolicy in framework prior to SMR Apr-2023 Release 1 allows local attackers to access contentProvider without proper permission...

5.3CVSS6.5AI score0.00019EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/29 12:0 a.m.1 views

OpenAtlas 跨站脚本漏洞

OpenAtlas is an Android non-proxy dynamic deployment framework from the Austrian company OpenAtlas. A cross-site scripting vulnerability exists in OpenAtlas version v8.9.0, which stems from insufficient validation of user input in a POST request and could lead to a cross-site scripting attack...

5.4CVSS5.8AI score0.00048EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/08/29 12:0 a.m.1 views

OpenAtlas 跨站脚本漏洞

OpenAtlas is an Android non-proxy dynamic deployment framework from the Austrian company OpenAtlas. A cross-site scripting vulnerability exists in OpenAtlas version v8.9.0, which stems from insufficient validation of user input in a POST request and could lead to a cross-site scripting attack...

5.4CVSS5.8AI score0.00048EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/08/29 12:0 a.m.2 views

OpenAtlas 跨站脚本漏洞

OpenAtlas is an Android non-proxy dynamic deployment framework from the Austrian company OpenAtlas. A cross-site scripting vulnerability exists in OpenAtlas version v8.9.0, which stems from insufficient validation of user input in a POST request and could lead to a cross-site scripting attack...

5.4CVSS5.8AI score0.00048EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/08/01 12:0 a.m.2 views

PT-2025-32188

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The Android Framework component contains a flaw in access control. Exploitation of this issue may allow an attacker to escalate privileges. A race condition in multiple locations may allow...

7.2CVSS6.5AI score0.00005EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2025/05/22 10:21 p.m.5 views

CVE-2022-20324

In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS6AI score0.00015EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:19 p.m.5 views

CVE-2018-14983

The Sony Xperia L1 Android device with a build fingerprint of Sony/G3313/G3313:7.0/43.0.A.6.49/2867558199:user/release-keys contains the android framework i.e., systemserver with a package name of android versionCode=24, versionName=7.0 that has been modified by Sony or another entity in the supp...

5.5CVSS6.5AI score0.00081EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/05/05 12:0 a.m.3 views

PT-2025-24449

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The vulnerability resides within the Android operating system’s Framework component, stemming from a buffer copy operation lacking input size validation. Exploitation may allow an attacker ...

7.8CVSS6.4AI score0.0001EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/05/05 12:0 a.m.2 views

PT-2025-24445

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A path traversal error exists in the Android Framework component, potentially allowing an attacker to gain local privilege escalation without requiring additional execution privileges...

6.2CVSS6.7AI score0.00008EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/11/19 12:0 a.m.1 views

Google Android 安全漏洞

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Framework component of Google Android. An attacker can exploit this vulnerability to achieve elevation of privilege...

7.8CVSS7AI score0.00046EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/19 12:0 a.m.1 views

Google Android 安全漏洞

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Framework component of Google Android. An attacker can exploit this vulnerability to achieve elevation of privilege...

7.8CVSS7AI score0.00035EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/15 12:0 a.m.3 views

Google Android 安全漏洞

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Framework of Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, which can be exploited by an attacker to elevate privileges...

7.8CVSS7.1AI score0.00006EPSS
Exploits0References1
The Hacker News
The Hacker News
added 2024/11/08 5:17 a.m.50 views

CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a now-patched critical security flaw impacting Palo Alto Networks Expedition to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-5910 CVS...

10CVSS8.4AI score0.9431EPSS
Exploits16
Rows per page
Query Builder