CVE-2022-39903

Improper access control vulnerability in RCS call prior to SMR Dec-2022 Release 1 allows local attackers to access RCS incoming call number...

Authorization

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...

CVE-2022-39903

Improper access control vulnerability in RCS call prior to SMR Dec-2022 Release 1 allows local attackers to access RCS incoming call number...

PT-2022-36176

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.80 Description A memory leak issue was discovered in the Linux Kernel. The issue is related to the check func call function. The actual impact and attack plausibility have not yet been proven. Recommendatio...

CVE-2022-39902: Improper Authorization

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...

CVE-2022-39902

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...

PT-2022-25096 · Rcs · Rcs

Name of the Vulnerable Software and Affected Versions: RCS versions prior to SMR Dec-2022 Release 1 Description: The issue is related to improper access control in RCS calls, allowing local attackers to access the incoming call number. Recommendations: For versions prior to SMR Dec-2022 Release 1...

CVE-2022-39903

Improper access control vulnerability in RCS call prior to SMR Dec-2022 Release 1 allows local attackers to access RCS incoming call number...

CVE-2022-39902

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...

PT-2022-36533

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.300 Description The issue concerns the ALSA usb-audio component, specifically the snd usbmidi output open function. It involves the removal of a snd BUG ON call. The actual impact and potential for attack...

Apache Solr < 8.11.1 Information Disclosure

The version of Apache Solr running on the remote host is prior to 8.11.1. It is, therefore, affected by an information disclosure vulnerability due to improper input validation in DataImportHandler. The vulnerability allows an attacker to provide a Windows UNC path resulting in an SMB network cal...

Windows ALPC Privilege Escalation

The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...

Incorrect use of AddressAliasHelper.applyL1ToL2Alias() in _isAuthorized()

Lines of code Vulnerability details Summary In the isAuthorized function, the require statement checks if the msg.sender is equal to the result of calling AddressAliasHelper.applyL1ToL2Alias with relayer as the argument. However, this is incorrect, as AddressAliasHelper.applyL1ToL2Alias is intend...

CVE-2022-3858: Undefined Security Weakness

The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button WordPress plugin before 3.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin...

PUB-A-231630423

In various functions of apinputprocessor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

PT-2022-26195 · Nextcloud · Nextcloud Talk Android

Name of the Vulnerable Software and Affected Versions: Nextcloud Talk android versions prior to 12.2.8 Nextcloud Talk android versions prior to 13.0.10 Nextcloud Talk android versions prior to 14.0.6 Nextcloud Talk android versions prior to 15.0.0 Description: Nextcloud Talk android is a video an...

PUB-A-231585645

In strings.xml, there is a possible permission bypass due to a misleading string. This could lead to remote information disclosure of call logs with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-46149

Cap'n Proto is a data interchange format and remote procedure call RPC system. Cap'n Proro prior to versions 0.7.1, 0.8.1, 0.9.2, and 0.10.3, as well as versions of Cap'n Proto's Rust implementation prior to 0.13.7, 0.14.11, and 0.15.2 are vulnerable to out-of-bounds read due to logic error...

Out-of-bounds

Cap'n Proto is a data interchange format and remote procedure call RPC system. Cap'n Proro prior to versions 0.7.1, 0.8.1, 0.9.2, and 0.10.3, as well as versions of Cap'n Proto's Rust implementation prior to 0.13.7, 0.14.11, and 0.15.2 are vulnerable to out-of-bounds read due to logic error...

Microsoft Windows ALPC Privilege Escalation

The vulnerability of the Advanced Local Procedure Call ALPC in Microsoft Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...