Lucene search
+L

2892 matches found

OSV
OSV
added 2020/09/17 9:15 p.m.3 views

CVE-2020-0266

In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-1110864...

7.8CVSS7.2AI score
SaveExploits0References1
NVD
NVD
added 2020/09/17 9:15 p.m.21 views

CVE-2020-0266

In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-1110864...

7.8CVSS0.00163EPSS
SaveExploits0References1
Prion
Prion
added 2020/09/17 9:15 p.m.19 views

Design/Logic Flaw

In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-1110864...

7.2CVSS8.1AI score0.00163EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/09/17 8:58 p.m.50 views

CVE-2020-0266

CVE-2020-0266 affects Android 11 via a factory reset protection (FRP) issue where a missing permission check enables a local elevation of privilege. Exploitation is described as requiring local access with no user interaction; no detailed exploit vectors are provided in the excerpts. The impact i...

7.8CVSS8.2AI score0.00163EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/09/17 8:58 p.m.20 views

CVE-2020-0266

In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-1110864...

8.4AI score0.00163EPSS
SaveExploits0References1
Prion
Prion
added 2020/09/08 10:15 a.m.22 views

Design/Logic Flaw

u'Keymaster attestation key and device IDs provisioning which is a one time process is incorrectly allowed to be re-provisioned after a user data erase or a factory reset' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voi...

7.2CVSS7.6AI score0.0016EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/09/01 12:0 a.m.5 views

TP-Link TL-WA855RE Elevation of Privilege Vulnerability

The TP-Link TL-WA855RE is a 300Mbps Wi-Fi range extender. An elevation of privilege vulnerability exists in the TP-Link TL-WA855RE V5 version 20200415-rel37464. An attacker can perform a factory reset and reboot via a TDDPRESET POST request, which can be exploited to set a new administrative...

8.8CVSS7.4AI score0.20689EPSS
SaveExploits1References1
OSV
OSV
added 2020/08/31 9:15 p.m.7 views

CVE-2020-25051

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Attackers can bypass Factory Reset Protection FRP via AppInfo. The Samsung ID is SVE-2020-17758 August 2020...

7.5CVSS7.1AI score0.00364EPSS
SaveExploits0References1
NVD
NVD
added 2020/08/31 9:15 p.m.22 views

CVE-2020-25051

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Attackers can bypass Factory Reset Protection FRP via AppInfo. The Samsung ID is SVE-2020-17758 August 2020...

7.5CVSS7.6AI score0.00364EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/08/31 8:25 p.m.31 views

CVE-2020-25051

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Attackers can bypass Factory Reset Protection FRP via AppInfo. The Samsung ID is SVE-2020-17758 August 2020...

7.6AI score0.00364EPSS
SaveExploits0References1
NVD
NVD
added 2020/08/31 4:15 p.m.20 views

CVE-2020-24363

TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker on the same network to submit a TDDPRESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password...

8.8CVSS8.8AI score0.20689EPSS
SaveExploits1References4
Prion
Prion
added 2020/08/31 4:15 p.m.20 views

Cross site request forgery (csrf)

TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker on the same network to submit a TDDPRESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password...

8.3CVSS8.7AI score0.20689EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
added 2020/08/31 3:49 p.m.7 views

EUVD-2020-17095

TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker on the same network to submit a TDDPRESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password...

8.8CVSS8.8AI score0.20689EPSS
SaveExploits1References3
CVE
CVE
added 2020/08/31 3:49 p.m.113 views

CVE-2020-24363

CVE-2020-24363 affects TP-Link TL-WA855RE V5 (20200415-rel37464). An unauthenticated attacker on the same network can submit a TDDP_RESET POST request to trigger a factory reset/reboot and then set a new administrative password, leading to incorrect access control. The vulnerability is classified...

8.8CVSS8.7AI score0.20689EPSS
SaveIn wildExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2020/08/31 3:49 p.m.3 views

CVE-2020-24363

TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker on the same network to submit a TDDPRESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password...

6.5AI score0.20689EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2020/08/31 3:40 p.m.6 views

cxf: JMX integration is vulnerable to a MITM attack

Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘ property of the default InstrumentationManagerImpl is not disabled, then it is vulnerable to a man-in-the-middle MITM style attack. An...

5.3CVSS7.4AI score0.06147EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2020/08/31 12:0 a.m.9 views

PT-2020-15707

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WA855RE version V5 20200415-rel37464 Description: TP-Link TL-WA855RE devices allow an unauthenticated attacker on the same network to submit a TDDP RESET POST request, leading to a factory reset and reboot. This allows the attacker...

8.8CVSS7.6AI score0.20689EPSS
SaveExploits1References25
Openbugbounty
Openbugbounty
added 2020/08/29 10:30 a.m.7 views

beetle-factory-shop.de Cross Site Scripting vulnerability OBB-1284065

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/08/26 5:29 a.m.5 views

orderonline.pizzafactory209.com.au Cross Site Scripting vulnerability OBB-1276668

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
OpenVAS
OpenVAS
added 2020/08/13 12:0 a.m.30 views

openSUSE: Security Advisory for java-11-openjdk (openSUSE-SU-2020:1191-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.3CVSS7.2AI score0.05166EPSS
SaveExploits0References2
Rows per page
Query Builder