CVE-2022-32602

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07388790; Issue ID: ALPS07388790...

Object First 安全特征问题特征问题漏洞

Object First is a Veeam best-of-breed storage solution from Object First. A security signature issue vulnerability exists in Object First version 1.0.7.712, which stems from the use of an insecure RNG in the command that creates URLs for support packages, which could allow an attacker to access...

CVE-2022-44795

CVE-2022-44795 affects Object First Ootbi BETA, versions 1.0.7.712 through 1.0.13.1610 (fixed in 1.0.13.1611). The root cause is an insecure RNG used to create the URL for the support bundle, which could allow an attacker with credentials to predict the URL and access system logs, resulting in lo...

Amazon Linux 2022 : flac, flac-devel, flac-libs (ALAS2022-2022-163)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-163 advisory. An out-of-bounds write vulnerability was found in libFlak. The vulnerability occurs due to a missing bounds check. This flaw allows a local attacker without additional execution privileges to cause loca...

hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)

A flaw was found in hw. Incomplete cleanup in specific special register write operations for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

PT-2022-6987 · Unknown · Keyinstall

Name of the Vulnerable Software and Affected Versions: keyinstall affected versions not specified Description: The issue is related to a missing bounds check in keyinstall, which could lead to local information disclosure. System execution privileges are needed for exploitation, and user...

SUSE: Security Advisory (SUSE-SU-2022:3693-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-39117

In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2022-39117

In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2022-38688

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2022-38688

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2022-38689

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2022-38689

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

Information disclosure

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

Information disclosure

In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2022-20464

CVE-2022-20464 affects Android’s audio processing path in ap_input_processor.c (Android kernel). The logic error can allow recording audio during a phone call, causing local information disclosure. Impact is confidentiality loss (HIGH) with access locally from a user with LOW privileges and no us...

CVE-2022-20464

In various functions of apinputprocessor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

CVE-2022-38688

CVE-2022-38688 : The telephony service contains a missing permission check that enables local information disclosure without additional execution privileges. The NVD entry assigns a CVSS v3.1 base score of 5.5 (Local exploit, Low complexity, Low privileges required; Confidentiality impact: High)....

UNISOC chipset 安全漏洞

UNISOC chipset is an integrated circuit chipset from China's Unisoc Corporation. A security vulnerability exists in UNISOC chipset due to a lack of privilege checking in the messaging service, which can be exploited by an attacker to potentially cause a local information disclosure, and the...

CVE-2022-39117

CVE-2022-39117 involves a missing permission check in the messaging service, enabling local information disclosure without additional execution privileges. Multiple connected sources (NVD/NVD-derived records, Red Hat, PRION, CNNVD, and others) describe the issue as a local confidentiality exposur...