8602 matches found
CVE-2020-0459
In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configuration data due to a missing permission check. This could lead to local information disclosure of WiFi network names with no additional execution privileges needed. User interacti...
CVE-2020-0459
In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configuration data due to a missing permission check. This could lead to local information disclosure of WiFi network names with no additional execution privileges needed. User interacti...
Design/Logic Flaw
In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue. This could lead to local information disclosure of secure network traffic over a non-VPN link with no additional execution privileges needed. User interaction is not needed for...
CVE-2020-0019
CVE-2020-0019 affects Broadcom Nexus firmware in Android SoCs, where an insecure default password may allow local information disclosure in the kernel without extra privileges or user interaction. Exploitation is local; impact is confidentiality loss as described by CVSS metrics. The available do...
CVE-2020-0019
In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413798...
CVE-2020-0467
In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue. This could lead to local information disclosure of secure network traffic over a non-VPN link with no additional execution privileges needed. User interaction is not needed for...
CVE-2020-0467
In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue. This could lead to local information disclosure of secure network traffic over a non-VPN link with no additional execution privileges needed. User interaction is not needed for...
CVE-2020-0467
CVE-2020-0467 concerns a logic issue in Vpn.java (onUserStopped) on Android where user preferences could be reset, potentially causing local information disclosure of secure network traffic when not on VPN. Affected platforms include Android 8.1, 9, 10 and 11. Exploitation is described as requiri...
CVE-2020-0468
In listen and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
PT-2020-11388
Name of the Vulnerable Software and Affected Versions Android SoC versions affected versions not specified Description The issue concerns an insecure default password in the Broadcom Nexus firmware. This could lead to local information disclosure in the kernel without requiring additional executi...
CVE-2020-0468: Missing Authorization
In listen and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
CVE-2020-0467: Improper Resource Shutdown or Release
In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue. This could lead to local information disclosure of secure network traffic over a non-VPN link with no additional execution privileges needed. User interaction is not needed for...
CVE-2020-0459: Missing Authorization
In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configuration data due to a missing permission check. This could lead to local information disclosure of WiFi network names with no additional execution privileges needed. User interacti...
CVE-2020-0019: Initialization of a Resource with an Insecure Default
In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413798...
ASB-A-158484422
In listen and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
PT-2020-11804
Name of the Vulnerable Software and Affected Versions Android versions 8.1 through 11 Description A logic issue in the onUserStopped function of Vpn.java may cause a resetting of user preferences. This could lead to local information disclosure of secure network traffic over a non-VPN link, with ...
PT-2020-11805
Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-11 Description The issue is related to a missing permission check in the listen and related functions of TelephonyRegistry.java, which could lead to a permissions bypass of location permissions. This...
PT-2020-11800
Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 10 Description A potential leak of sensitive WiFi configuration data exists due to a missing permission check in the sendConfiguredNetworkChangedBroadcast function of WifiConfigManager.java. This could lead to loca...
ASB-A-171413798
In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...