Lucene search
+L

6423 matches found

NVD
NVD
added 2019/12/06 11:15 p.m.25 views

CVE-2019-2231

In Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID...

4.4CVSS4.4AI score0.00095EPSS
SaveExploits0References1
OSV
OSV
added 2019/12/06 11:15 p.m.8 views

CVE-2019-2220

In checkOperation of AppOpsService.java, there is a possible bypass of user interaction requirements due to mishandling application suspend. This could lead to local information disclosure no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

5.5CVSS6.8AI score0.00164EPSS
SaveExploits0References1
NVD
NVD
added 2019/12/06 11:15 p.m.37 views

CVE-2019-2220

In checkOperation of AppOpsService.java, there is a possible bypass of user interaction requirements due to mishandling application suspend. This could lead to local information disclosure no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

5.5CVSS5.2AI score0.00164EPSS
SaveExploits0References1
NVD
NVD
added 2019/12/06 11:15 p.m.19 views

CVE-2019-2226

In deviceclasstoint of deviceclass.cc, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure in the Bluetooth server with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8...

5.5CVSS5.1AI score0.00148EPSS
SaveExploits0References1
Prion
Prion
added 2019/12/06 11:15 p.m.21 views

Design/Logic Flaw

In checkOperation of AppOpsService.java, there is a possible bypass of user interaction requirements due to mishandling application suspend. This could lead to local information disclosure no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

4.9CVSS5.2AI score0.00164EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2019/12/06 11:15 p.m.24 views

CVE-2019-2228

In arrayfind of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

5.5CVSS6.6AI score0.00203EPSS
SaveExploits0References4
OSV
OSV
added 2019/12/06 11:15 p.m.7 views

UBUNTU-CVE-2019-2228

In arrayfind of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

5.5CVSS6.9AI score0.00203EPSS
SaveExploits0References5
Prion
Prion
added 2019/12/06 11:15 p.m.20 views

Out-of-bounds

In arrayfind of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

4.9CVSS5.1AI score0.00203EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2019/12/06 11:15 p.m.19 views

Input validation

In Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID...

2.1CVSS4.3AI score0.00095EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/12/06 10:40 p.m.30 views

CVE-2019-2231

In Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID...

4.4AI score0.00095EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2019/12/06 10:40 p.m.72 views

CVE-2019-2228

In arrayfind of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

5.5CVSS5AI score0.00203EPSS
SaveExploits0
Cvelist
Cvelist
added 2019/12/06 10:40 p.m.28 views

CVE-2019-2226

In deviceclasstoint of deviceclass.cc, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure in the Bluetooth server with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8...

5.1AI score0.00148EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/12/06 10:40 p.m.28 views

CVE-2019-2229

In updateWidget of BaseWidgetProvider.java, there is a possible leak of user data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8....

5.1AI score0.00131EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/12/06 10:40 p.m.36 views

CVE-2019-2228

In arrayfind of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

5.1AI score0.00203EPSS
SaveExploits0References3
CVE
CVE
added 2019/12/06 10:40 p.m.177 views

CVE-2019-2226

An Android CVE-2019-2226 issue affects Android 8.0–10, where in device_class_to_int in device_class.cc an improper cast can cause an out-of-bounds read in the Bluetooth server, enabling local information disclosure with no user interaction required; patched via the 2019-12 Android security bullet...

5.5CVSS5AI score0.00148EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/12/06 10:40 p.m.197 views

CVE-2019-2220

CVE-2019-2220 affects the Android Framework (AppOpsService) and involves a bypass of user interaction requirements caused by mishandling of application suspend. The vulnerability could allow local information disclosure without requiring additional privileges. Affected products are Android 9 and ...

5.5CVSS5.1AI score0.00164EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/12/06 10:40 p.m.37 views

CVE-2019-2220

In checkOperation of AppOpsService.java, there is a possible bypass of user interaction requirements due to mishandling application suspend. This could lead to local information disclosure no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

5.2AI score0.00164EPSS
SaveExploits0References1
OSV
OSV
added 2019/11/14 8:15 p.m.11 views

CVE-2019-14590

Improper access control in the API for the IntelR Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS6.1AI score0.00281EPSS
SaveExploits0References2
Symantec
Symantec
added 2019/11/14 12:00 a.m.71 views

Fortinet FortiOS CVE-2019-5593 Information Disclosure Vulnerability

Description Fortinet FortiOS is prone to an local information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Fortinet FortiOS 6.2.0, 6.0.0 through 6.0.6, 5.6.10 and prior are vulnerable. Technologies Affected Fortinet...

0.8AI score0.00189EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2019/11/13 6:15 p.m.25 views

CVE-2019-2211

In createProjectionMapForQuery of TvProvider.java, there is possible SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9...

7.8CVSS7.3AI score0.00669EPSS
SaveExploits0References1
Rows per page
Query Builder