CVE-2020-15250

In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this...

CVE-2020-15250 Information disclosure in JUnit4

In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this...

CVE-2020-15250: Exposure of Sensitive Information to an Unauthorized Actor

In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this...

Oracle Linux 7 : libexif (ELSA-2020-4040)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4040 advisory. 0.6.22-1 - Upgrade to 0.6.22 - Resolves: 1841316 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

PT-2020-11763

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 11 Description A missing permission check in the setProcessMemoryTrimLevel function of ActivityManagerService.java could lead to local information disclosure of foreground processes. No additional execution...

PT-2020-11751

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-11 Description The issue is related to a permission bypass due to a PendingIntent error in the updateMwi function of NotificationMgr.java. This could lead to local information disclosure, requiring...

PT-2020-11753

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-11 Description The issue is related to a possible permission bypass in the showDataRoamingNotification function of NotificationMgr.java due to an unsafe PendingIntent. This could lead to local...

PT-2020-11761

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 11 Description The issue is related to a permission bypass due to a PendingIntent error in the setNotification function of SapServer.java. This could lead to local information disclosure, requiring User execution...

ASB-A-160390416

In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclosure of foreground processes with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-156020795

In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation...

PT-2020-11772

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 11 Description The issue is related to a permissions bypass due to an unsafe PendingIntent in the constructImportFailureNotification function of NotificationImportExportListener.java. This could lead to local...

PT-2020-11601

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-11 Description A missing permission check in the getCarrierPrivilegeStatus function of UiccAccessRule.java could lead to local information disclosure of EID data. No additional execution privileges a...

ASB-A-159062405

In getCarrierPrivilegeStatus of UiccAccessRule.java, there is a missing permission check. This could lead to local information disclosure of EID data with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-163003156

In ISP TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

ASB-A-142125338

In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

Google Android Buffer Overflow Vulnerability (CNVD-2020-54303)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in Android version 11, which stems from a read out-of-bounds vulnerability due to a lack of boundary checking in Bluetooth, and can be exploited by an...

Google Android Information Disclosure Vulnerability (CNVD-2020-53762)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. Android version 11 has a security vulnerability that stems from an insecure hang in Settings, which can be exploited by an attacker to cause a local information leak...

Google Android Accessibility Information Disclosure Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in the Android-11 version that stems from an insecure hang in Accessibility, which can be exploited by an attacker to cause a local information leak...

Google Android Auto Settings Information Disclosure Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in the Android-11 version, which stems from an insecure hang in Android Auto Settings that can be exploited by an attacker to cause a local information leak...

Google Android Information Disclosure Vulnerability (CNVD-2020-60501)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Kernel is one of the kernel components, Framework is one of the Android framework components, System is one of the system components, VPN is one of the VPN Virtual Private Network...