11958 matches found
CVE-2023-42716
In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed...
CVE-2023-42710
CVE-2023-42710 concerns the UNISOC chipset firewall service. A missing permission check allows writing permission usage records for an app, potentially leaking information locally without requiring extra execution privileges. Affected: firewall service on UNISOC chipsets (devices not explicitly n...
CVE-2023-42708
CVE-2023-42708 affects the firewall service, where a missing permission check could allow writing an app’s permission usage records, leading to local information disclosure without extra execution privileges. The issue is documented across multiple sources (NVD/Red Hat/PRion/CVE lists) and is ass...
CVE-2023-42705
In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-42699
CVE-2023-42699 concerns the omacp service. A missing permission check could allow writing permission usage records for an app, enabling local information disclosure without additional execution privileges. Public sources summarize the issue and impact (local information disclosure) but do not pro...
CVE-2023-42701
CVE-2023-42701 affects UNISOC firewall service in UNISOC chipsets. The root cause is a missing permission check that can allow an attacker to write permission usage records for an app, resulting in local information disclosure without requiring additional execution privileges. The NVD entry lists...
CVE-2023-42700
CVE-2023-42700 affects the firewall service on Unisoc chipsets, where a missing permission check allows an app to write permission usage records, leading to local information disclosure. The NVD report assigns CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (base score 5.5). Exploitation status is...
CVE-2023-42678
In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-42673
In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
PT-2023-28533 · Unknown · Firewall Service
Name of the Vulnerable Software and Affected Versions: Firewall service affected versions not specified Description: The issue is related to a missing permission check in the firewall service, allowing potential local information disclosure without requiring additional execution privileges...
PT-2023-9136 · Adobe · Animate
Name of the Vulnerable Software and Affected Versions: Adobe Animate versions 23.0.4, 24.0.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations...
info-netz-musik.bplaced.net Cross Site Scripting vulnerability OBB-3799512
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-20709 · Zippy · Zippy
Name of the Vulnerable Software and Affected Versions: Zippy versions 1.6.1 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made available to individuals who should not have access to it...
CVE-2023-45482
Tenda AC10 version USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via the urls parameter in the function getparentControllistInfo...
PT-2023-7439 · Delta Electronics · Infrasuite Device Master
Name of the Vulnerable Software and Affected Versions: Delta Electronics InfraSuite Device Master version 1.0.7 Description: A vulnerability exists in Delta Electronics InfraSuite Device Master that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtai...
VulnCheck KEV: CVE-2023-49103
ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo via GetPhpInfo.php, including administrative credentials...
VulnCheck KEV: CVE-2018-11409
Splunk through 7.0.1 allows information disclosure by appending raw/services/server/info/server-info?outputmode=json to a query, as demonstrated by discovering a license key...
flensburg.branchen-info.net Cross Site Scripting vulnerability OBB-3790469
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
