6424 matches found
Information disclosure
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
Information disclosure
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-42654
CVE-2023-42654 affects Unisoc-based systems where the dm service lacks a required permission check, leading to local information disclosure. The NVD entry notes a Local attack vector with LOW privileges required and no user interaction, but excluding any impact on integrity or availability. Sever...
CVE-2023-42654
In dm service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-42654
In dm service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-42650
In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-42651
In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-42651
Technical details about CVE-2023-42651 are not publicly provided in the connected documents. The available sources reiterate a local information disclosure in engineermode without additional execution privileges, but do not specify affected products, versions, exploitability, or fixes. Monitor fo...
CVE-2023-42652
In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-42650
CVE-2023-42650 concerns UNISOC chipsets’ engineermode. The vulnerability is due to a missing permission check in engineermode, which could allow local information disclosure without requiring additional execution privileges. The NVD entry lists a CVSSv3.1 base score of 5.5 (Medium) with LOCAL att...
CVE-2023-42648
In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-42646
In Ifaa service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-42649
In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-42649
CVE-2023-42649 concerns UNISOC chipsets’ engineermode where a missing permission check allows local information disclosure without requiring execution privileges. Affected component: engineermode logic; root cause: inadequate permission validation leading to exposure of sensitive data to local at...
CVE-2023-42647
In Ifaa service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-42647
In Ifaa service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-42646
CVE-2023-42646 concerns UNISOC-based systems with an Ifaa service that lacks a required permission check, enabling local information disclosure without additional privileges. The root cause is insufficient access-control in the Ifaa service, leading to exposure of sensitive data to an attacker wi...
CVE-2023-42649
In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...