Lucene search
+L

6424 matches found

Positive Technologies
Positive Technologies
added 2022/04/11 12:00 a.m.10 views

PT-2022-14324 · Vow · Vow

Name of the Vulnerable Software and Affected Versions: vow affected versions not specified Description: The issue is related to a possible read of uninitialized data due to improper input validation. This could lead to local information disclosure, with System execution privileges required. No us...

4.4CVSS4.4AI score0.00116EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/04/11 12:00 a.m.12 views

PT-2022-14310 · Ccci · Ccci

Name of the Vulnerable Software and Affected Versions: ccci affected versions not specified Description: The issue is related to an incorrect bounds check, which could lead to a leak of kernel pointer. This might result in local information disclosure, requiring System execution privileges for...

7.2CVSS6.1AI score0.00128EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/04/01 12:00 a.m.24 views

Google Android Information Disclosure Vulnerability (CNVD-2022-44592)

Google Android is a Linux-based open-source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability caused by a lack of permission checking in the DomainVerificationService. An attacker could exploit this vulnerability to cause local information...

5.5CVSS1.8AI score0.00104EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/01 12:00 a.m.41 views

ASB-A-208277166

In ionioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS4.9AI score0.0014EPSS
SaveExploits0References4
OSV
OSV
added 2022/03/30 4:15 p.m.8 views

CVE-2021-39775

In People, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS5.9AI score0.00111EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/30 4:15 p.m.8 views

CVE-2021-39779

In getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could lead to local information disclosure of the call state with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...

5.5CVSS5.9AI score0.00104EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/30 4:15 p.m.8 views

CVE-2021-39766

In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS5.9AI score0.00111EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/30 4:15 p.m.7 views

CVE-2021-39769

In Device Policy, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product...

5.5CVSS6.2AI score0.00104EPSS
SaveExploits0References2
NVD
NVD
added 2022/03/30 4:15 p.m.26 views

CVE-2021-39773

In VpnManagerService, there is a possible disclosure of installed VPN packages due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

5.5CVSS0.00111EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/30 4:15 p.m.7 views

CVE-2021-39766

In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS6.2AI score0.00111EPSS
SaveExploits0References2
NVD
NVD
added 2022/03/30 4:15 p.m.21 views

CVE-2021-39778

In Telecomm, there is a possible way to determine whether an app is installed, without query permissions, due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

5.5CVSS0.00112EPSS
SaveExploits0References1
NVD
NVD
added 2022/03/30 4:15 p.m.22 views

CVE-2021-39779

In getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could lead to local information disclosure of the call state with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...

5.5CVSS0.00104EPSS
SaveExploits0References1
NVD
NVD
added 2022/03/30 4:15 p.m.25 views

CVE-2021-39775

In People, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS0.00111EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/30 4:15 p.m.10 views

CVE-2021-39770

In Framework, there is a possible disclosure of the device owner package due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid...

5.5CVSS6.2AI score0.00104EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/03/30 4:15 p.m.5 views

CVE-2021-39778

In Telecomm, there is a possible way to determine whether an app is installed, without query permissions, due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

5.5CVSS6.2AI score0.00112EPSS
SaveExploits0References2
NVD
NVD
added 2022/03/30 4:15 p.m.22 views

CVE-2021-39777

In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

5.5CVSS0.00111EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/30 4:15 p.m.9 views

CVE-2021-39769

In Device Policy, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product...

5.5CVSS5.9AI score0.00104EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/30 4:15 p.m.6 views

CVE-2021-39775

In People, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS6.2AI score0.00111EPSS
SaveExploits0References2
OSV
OSV
added 2022/03/30 4:15 p.m.8 views

CVE-2021-39777

In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

5.5CVSS5.9AI score0.00111EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/30 4:15 p.m.6 views

CVE-2021-39740

In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID...

5.5CVSS6.2AI score0.00112EPSS
SaveExploits0References2
Rows per page
Query Builder