Lucene search
K

2877 matches found

Prion
Prion
added 2023/03/24 8:15 p.m.14 views

Design/Logic Flaw

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

4.3CVSS7.7AI score0.0009EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2023/03/24 8:15 p.m.14 views

Design/Logic Flaw

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

4.3CVSS7.7AI score0.0009EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/03/24 12:0 a.m.20 views

CVE-2023-21004

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

8AI score0.0009EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/03/24 12:0 a.m.13 views

CVE-2023-21003

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8AI score0.0009EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/03/24 12:0 a.m.10 views

CVE-2023-21005

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8AI score0.0009EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/03/24 12:0 a.m.8 views

CVE-2023-21002

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8AI score0.00109EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/03/24 12:0 a.m.6 views

CVE-2023-21015

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8AI score0.0009EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/03/24 12:0 a.m.2 views

PT-2023-17792 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: A permission bypass issue exists in the getAvailabilityStatus of several Transcode Permission Controllers due to a missing permission check. This could lead to local escalation of...

7.8CVSS7.7AI score0.00109EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/03/24 12:0 a.m.2 views

PT-2023-17805 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing permission check in the getAvailabilityStatus of several Transcode Permission Controllers. This could lead to a local escalation of privilege with no additional...

7.8CVSS7.6AI score0.0009EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/03/24 12:0 a.m.12 views

CVE-2023-21002

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

8AI score0.00109EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/03/24 12:0 a.m.23 views

CVE-2023-21005

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

8AI score0.0009EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/03/24 12:0 a.m.2 views

PT-2023-17795 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing permission check in the getAvailabilityStatus of several Transcode Permission Controllers. This could lead to a local escalation of privilege with no additional...

7.8CVSS7.6AI score0.0009EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/03/24 12:0 a.m.12 views

CVE-2023-21015

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

8AI score0.0009EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/03/24 12:0 a.m.3 views

PT-2023-17794 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: A permission bypass issue exists in the getAvailabilityStatus of several Transcode Permission Controllers due to a missing permission check. This could lead to local escalation of...

7.8CVSS7.7AI score0.0009EPSS
Exploits0References2
CVE
CVE
added 2023/03/24 12:0 a.m.73 views

CVE-2023-21005

CVE-2023-21005 affects Android 13, specifically the Transcode Permission Controllers. The root cause is a missing permission check in getAvailabilityStatus, enabling a possible local escalation of privilege with no additional execution privileges and no user interaction required. Public reference...

7.8CVSS7.7AI score0.0009EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/03/24 12:0 a.m.80 views

CVE-2023-21004

Affected product: Android 13 devices; component: Transcode Permission Controllers (getAvailabilityStatus). Root cause: missing permission check enabling a permission bypass. Impact: local escalation of privilege with no extra execution privileges required, no user interaction needed. Exploitation...

7.8CVSS7.7AI score0.0009EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/03/24 12:0 a.m.83 views

CVE-2023-21015

CVE-2023-21015 affects Android 13, involving the GetAvailabilityStatus path of several Transcode Permission Controllers. The root cause is a missing permission check that could permit a local escalation of privilege with no extra execution privileges or user interaction required. The vulnerabilit...

7.8CVSS7.7AI score0.0009EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/03/24 12:0 a.m.13 views

CVE-2023-21003

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

8AI score0.0009EPSS
Exploits0References1
NVD
NVD
added 2023/03/23 5:15 p.m.26 views

CVE-2023-20100

A vulnerability in the access point AP joining process of the Control and Provisioning of Wireless Access Points CAPWAP protocol of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

6.8CVSS6.7AI score0.00775EPSS
Exploits0References1
OSV
OSV
added 2023/03/23 5:15 p.m.2 views

CVE-2023-20067

A vulnerability in the HTTP-based client profiling feature of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation of...

6.5CVSS5.8AI score
Exploits0References1
Rows per page
Query Builder