2601 matches found
Google Android Elevation of Privilege Vulnerability (CNVD-2022-47672)
Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which originates in onEntryUpdated in OngoingCallController.kt, and due to intent redirection, can initiate non- exported activity, an attacker can use...
Thousands of Borrowers' Data Exposed from ENCollect Debt Collection Service
An ElasticSearch server instance that was left open on the Internet without a password contained sensitive financial information about loans from Indian and African financial services. The leak, which was discovered by researchers from information security company UpGuard, amounted to 5.8GB and...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which originates in onEntryUpdated in OngoingCallController.kt, and due to intent redirection, can initiate non- exported activity, an attacker can use...
PT-2022-14360
Name of the Vulnerable Software and Affected Versions Android versions Android-12 through Android-12L Description The issue allows launching non-exported activities due to intent redirection in the onEntryUpdated function of OngoingCallController.kt. This could lead to local escalation of privile...
ASB-A-212467440
In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...
CVE-2020-14118
An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps...
CVE-2020-14116
An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not verify the validity of the incoming data. Attackers can perform sensitive operations by exploiting this...
CVE-2020-14116
An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not verify the validity of the incoming data. Attackers can perform sensitive operations by exploiting this...
CVE-2020-14118
An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps...
Information disclosure
An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps...
Information disclosure
An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not verify the validity of the incoming data. Attackers can perform sensitive operations by exploiting this...
CVE-2020-14118
An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps...
CVE-2020-14118
CVE-2020-14118 affects the Xiaomi Mi App Store. The issue is an intent redirection vulnerability caused by the app store not verifying incoming data, which can cause automatic download/installation of apps. Documents confirm the root cause and impact (open redirect-like behavior) but do not provi...
CVE-2020-14116
An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not verify the validity of the incoming data. Attackers can perform sensitive operations by exploiting this...
CVE-2020-14116
CVE-2020-14116 affects Xiaomi Mi Browser. The issue is an open redirection vulnerability caused by Mi Browser not validating incoming data, enabling attackers to trigger sensitive operations. Related sources indicate vulnerability exists prior to version 15.8; remediation guidance suggests updati...
PT-2022-8553
Name of the Vulnerable Software and Affected Versions Mi App Store affected versions not specified Description The issue is caused by the Mi App Store not verifying the validity of incoming data, which can lead to the app store automatically downloading and installing apps. This is due to an inte...
CVE-2020-14118: URL Redirection to Untrusted Site
An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps...
PT-2022-8551
Name of the Vulnerable Software and Affected Versions Mi Browser affected versions not specified Description The issue is caused by the Mi Browser not verifying the validity of incoming data, leading to an intent redirection vulnerability. This allows attackers to perform sensitive operations by...
CVE-2020-14116: Insufficient Verification of Data Authenticity
An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not verify the validity of the incoming data. Attackers can perform sensitive operations by exploiting this...
