Lucene search
+L

2486 matches found

ATTACKERKB
ATTACKERKB
added 2021/12/15 7:15 p.m.10 views

CVE-2021-1012

In onResume of NotificationAccessDetails.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction ...

5.5CVSS6.1AI score0.00111EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/15 7:15 p.m.11 views

CVE-2021-1004

In getConfiguredNetworks of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is no...

7.8CVSS7.2AI score0.00104EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/15 7:15 p.m.7 views

CVE-2021-1018

In adjustStreamVolume of AudioService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is...

3.3CVSS5.6AI score0.0011EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/12/15 7:15 p.m.14 views

CVE-2021-1005

In getDeviceIdWithFeature of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User...

5.5CVSS6.1AI score0.00111EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/15 7:15 p.m.9 views

CVE-2021-1013

In checkExistsAndEnforceCannotModifyImmutablyRestrictedPermission of PermissionManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no...

5.5CVSS5.9AI score0.00111EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/15 7:15 p.m.10 views

CVE-2021-1012

In onResume of NotificationAccessDetails.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction ...

5.5CVSS6.2AI score0.00111EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/15 7:15 p.m.6 views

CVE-2021-1013

In checkExistsAndEnforceCannotModifyImmutablyRestrictedPermission of PermissionManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no...

5.5CVSS6.1AI score0.00111EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/15 7:15 p.m.9 views

CVE-2021-0987

In getNeighboringCellInfo of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User...

3.3CVSS5.9AI score0.0011EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/15 7:15 p.m.12 views

CVE-2021-0994

In requestRouteToHostAddress of ConnectivityService.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interactio...

3.3CVSS5.9AI score0.00104EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/15 7:15 p.m.13 views

CVE-2021-0989

In hasManageOngoingCallsPermission of TelecomServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed...

3.3CVSS5.9AI score0.0011EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/15 7:15 p.m.9 views

CVE-2021-0988

In getLaunchedFromUid and getLaunchedFromPackage of ActivityClientController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution...

3.3CVSS5.9AI score0.0011EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/15 7:15 p.m.7 views

CVE-2021-0995

In registerSuggestionConnectionStatusListener of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges...

3.3CVSS5.6AI score0.0011EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/15 7:15 p.m.6 views

CVE-2021-0995

In registerSuggestionConnectionStatusListener of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges...

3.3CVSS5.9AI score0.0011EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/15 7:15 p.m.20 views

Information disclosure

In getSerialForPackage of DeviceIdentifiersPolicyService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed...

2.1CVSS3.5AI score0.00104EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/12/15 7:15 p.m.19 views

Information disclosure

In registerSuggestionConnectionStatusListener of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges...

2.1CVSS3.5AI score0.0011EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/12/15 12:00 a.m.17 views

Cloudera Manager Installed (Linux)

Binary data clouderamanagerservernixinstalled.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2021/12/13 12:00 a.m.17 views

McAfee Policy Auditor Agent Installed

Binary data mcafeepolicyauditoragentwininstalled.nbin...

7.3AI score
SaveExploits0References1
CNVD
CNVD
added 2021/12/13 12:00 a.m.37 views

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2021-99616)

Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. Mozilla Firefox is vulnerable to an information disclosure vulnerability that stems from the use of XMLHttpRequest, which can be exploited by attackers to identify installed applications by probing error message...

6.5CVSS2.1AI score0.01714EPSS
SaveExploits0References1
Veracode
Veracode
added 2021/12/10 7:38 a.m.33 views

Information Disclosure

thunderbird and firefox are vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization when using XMLHttpRequest allowing an attacker to identify installed applications by probing error messages for loading external protocols...

6.5CVSS1.5AI score0.01714EPSS
SaveExploits0References13Affected Software7
RedHat Linux
RedHat Linux
added 2021/12/09 2:46 p.m.7 views

Mozilla: XMLHttpRequest error codes could have leaked the existence of an external protocol handler

Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading external protocols. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...

6.5CVSS7.3AI score0.01714EPSS
SaveExploits0References4
Rows per page
Query Builder