Lucene search
+L

8586 matches found

Prion
Prion
•added 2018/11/14 6:29 p.m.•32 views

Information disclosure

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

2.1CVSS5AI score0.00203EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2018/11/14 6:29 p.m.•23 views

Out-of-bounds

In registerapp of btifhd.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...

2.1CVSS5.1AI score0.00164EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2018/11/14 6:29 p.m.•23 views

CVE-2018-9457

In onCheckedChanged of BluetoothPairingController.java, there is a possible way to retrieve contact information due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product:...

5.5CVSS5.2AI score0.00162EPSS
SaveExploits0References3
Mend
Mend
•added 2018/11/14 6:00 p.m.•2 views

CVE-2018-9543

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

6.8CVSS0.00203EPSS
SaveExploits0References4
Mend
Mend
•added 2018/11/14 6:00 p.m.•1 views

CVE-2018-9457

In onCheckedChanged of BluetoothPairingController.java, there is a possible way to retrieve contact information due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product:...

6.8CVSS0.00162EPSS
SaveExploits0References3
CVE
CVE
•added 2018/11/14 6:00 p.m.•62 views

CVE-2018-9457

CVE-2018-9457 concerns Android devices where, in BluetoothPairingController.java during onCheckedChanged, a permissions bypass could allow an attacker to retrieve contact information, leading to local information disclosure without additional privileges and without user interaction. Affected vers...

5.5CVSS5.1AI score0.00162EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/14 12:00 a.m.•4 views

CVE-2018-9457: Missing Authorization

In onCheckedChanged of BluetoothPairingController.java, there is a possible way to retrieve contact information due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product:...

5.5CVSS6.5AI score0.00162EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/11/14 12:00 a.m.•2 views

PT-2018-19044

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to a possible out-of-bounds read in the Bluetooth service due to a missing bounds check. This could lead to local information disclosure with no additional execution...

5.5CVSS0.00164EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/14 12:00 a.m.•5 views

CVE-2018-9544: Out-of-bounds Read

In registerapp of btifhd.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...

5.5CVSS6.5AI score0.00164EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/11/14 12:00 a.m.•3 views

PT-2018-19017

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 9 Description A permissions bypass issue in the BluetoothPairingController.java file allows for the retrieval of contact information, potentially leading to local information disclosure. This issue can be exploited...

5.5CVSS0.00162EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2018/11/14 12:00 a.m.•3 views

PT-2018-19043

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue concerns a local information disclosure that can occur after a factory reset, without requiring additional execution privileges. It is noted that user interaction is not needed for...

5.5CVSS0.00203EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/14 12:00 a.m.•8 views

CVE-2018-9543: Exposure of Sensitive Information to an Unauthorized Actor

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

5.5CVSS6.5AI score0.00203EPSS
SaveExploits0References2
Symantec
Symantec
•added 2018/11/13 12:00 a.m.•405 views

Microsoft Windows MSRPC CVE-2018-8407 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Versi...

1.1AI score0.01655EPSS
SaveExploits0Affected Software3
Symantec
Symantec
•added 2018/11/13 12:00 a.m.•391 views

Microsoft Windows Kernel CVE-2018-8408 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

1.2AI score0.01655EPSS
SaveExploits0Affected Software3
OSV
OSV
•added 2018/11/06 5:29 p.m.•15 views

CVE-2018-9454

In bnepdataind of bnepmain.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0....

5.5CVSS5.9AI score0.00199EPSS
SaveExploits0References2
OSV
OSV
•added 2018/11/06 5:29 p.m.•11 views

CVE-2018-9451

In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions:...

5.5CVSS5.9AI score0.0019EPSS
SaveExploits0References2
NVD
NVD
•added 2018/11/06 5:29 p.m.•23 views

CVE-2018-9451

In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions:...

5.5CVSS5.4AI score0.0019EPSS
SaveExploits0References2
Prion
Prion
•added 2018/11/06 5:29 p.m.•29 views

Out-of-bounds

In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions:...

4.9CVSS5.1AI score0.0019EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2018/11/06 5:00 p.m.•1 views

CVE-2018-9453

In avdtmsgprscfg of avdtmsg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0...

6.8CVSS0.0019EPSS
SaveExploits0References2
Mend
Mend
•added 2018/11/06 5:00 p.m.•2 views

CVE-2018-9454

In bnepdataind of bnepmain.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0....

6.8CVSS0.00199EPSS
SaveExploits0References2
Rows per page
Query Builder