Lucene search
+L

4498 matches found

NVD
NVD
•added 2024/01/04 8:15 a.m.•29 views

CVE-2023-41784

Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...

6.6CVSS6.5AI score0.00167EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/01/04 8:15 a.m.•15 views

CVE-2023-41784

Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...

5.5CVSS5.8AI score0.00167EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/01/04 8:05 a.m.•44 views

CVE-2023-41784 Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro

Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...

6.6CVSS6.7AI score0.00167EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/01/04 8:05 a.m.•14 views

CVE-2023-41784 Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro

Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...

6.6CVSS6.5AI score0.00167EPSS
SaveExploits0References1
CVE
CVE
•added 2024/01/04 8:05 a.m.•87 views

CVE-2023-41784

CVE-2023-41784 affects ZTE Red Magic 8 Pro and is described as a Permissions and Access Control vulnerability (improper access control). The NVD entry lists a local attack vector with low attack complexity, no privileges required, but user interaction required, and it can impact confidentiality (...

6.6CVSS5.5AI score0.00167EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/01/04 12:00 a.m.•22 views

ZTE Red Magic 8 Pro Security Vulnerability

ZTE Red Magic 8 Pro is a gaming smartphone. A security vulnerability exists in the ZTE Red Magic 8 Pro GENCNNX729JV1.0.0B21MR version, which stems from the presence of an improper access control vulnerability. An attacker can exploit the vulnerability to gain unauthorized access to the relevant...

6.6CVSS6.9AI score0.00167EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/04 12:00 a.m.•11 views

CVE-2023-41784: Improper Privilege Management

Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...

6.6CVSS6AI score0.00167EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/01/04 12:00 a.m.•28 views

PT-2024-12974 · Zte · Zte Red Magic 8 Pro

Name of the Vulnerable Software and Affected Versions: ZTE Red Magic 8 Pro affected versions not specified Description: The issue concerns a Permissions and Access Control Vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or detai...

6.6CVSS5.4AI score0.00167EPSS
SaveExploits0References7
NVD
NVD
•added 2024/01/02 10:15 p.m.•23 views

CVE-2024-0196

A vulnerability has been found in Magic-Api up to 2.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resource/file/api/save?auto=1. The manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed ...

8.8CVSS7.5AI score0.00824EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2024/01/02 10:15 p.m.•21 views

CVE-2024-0196

A vulnerability has been found in Magic-Api up to 2.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resource/file/api/save?auto=1. The manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed ...

8.8CVSS5.5AI score0.00824EPSS
SaveExploits1References3
Prion
Prion
•added 2024/01/02 10:15 p.m.•25 views

Code injection

A vulnerability has been found in Magic-Api up to 2.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resource/file/api/save?auto=1. The manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed ...

6.5CVSS7.8AI score0.00824EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/02 10:00 p.m.•12 views

CVE-2024-0196 Magic-Api code injection

A vulnerability has been found in Magic-Api up to 2.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resource/file/api/save?auto=1. The manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed ...

6.5CVSS7.9AI score0.00824EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/01/02 10:00 p.m.•37 views

CVE-2024-0196 Magic-Api code injection

A vulnerability has been found in Magic-Api up to 2.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resource/file/api/save?auto=1. The manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed ...

6.5CVSS9.3AI score0.00824EPSS
SaveExploits1References3
CVE
CVE
•added 2024/01/02 10:00 p.m.•217 views

CVE-2024-0196

CVE-2024-0196 (Magic-Api) affects Magic-Api versions up to 2.0.1. The vulnerability is a code injection in an unknown functionality exposed via the HTTP endpoint /resource/file/api/save?auto=1, which can be exploited remotely. Multiple connected sources confirm code execution risk and public disc...

8.8CVSS9AI score0.00824EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2024/01/02 12:00 a.m.•27 views

PT-2024-15379 · Ai Magic · Ai Magic

Name of the Vulnerable Software and Affected Versions: Magic-Api versions up to 2.0.1 Description: A critical vulnerability has been found in Magic-Api, affecting an unknown functionality of the file "/resource/file/api/save?auto=1". The manipulation leads to code injection, and the attack can be...

8.8CVSS6.7AI score0.00824EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2024/01/02 12:00 a.m.•26 views

Magic-Api Code Injection Vulnerability

magic-api is sssssssss-team open source a Java-based interface rapid development framework . A code injection vulnerability exists in Magic-Api version 2.0.1 and earlier versions. Attackers exploit this vulnerability to cause code injection...

8.8CVSS7.3AI score0.00824EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/02 12:00 a.m.•9 views

CVE-2024-0196: Improper Control of Generation of Code

A vulnerability has been found in Magic-Api up to 2.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resource/file/api/save?auto=1. The manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed ...

8.8CVSS6.4AI score0.00824EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/12/29 12:00 a.m.•18 views

Honor Magic UI Security Flaw

Honor Magic Ui is an Android-based mobile operating system developed by Chinese company Honor. A security vulnerability exists in Honor Magic UI, which stems from the presence of a type obfuscation vulnerability, successful exploitation of which may result in a denial of service...

5.5CVSS6.7AI score0.00162EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/12/29 12:00 a.m.•19 views

Honor Magic Ui Security Breach

Honor Magic Ui is an Android-based mobile operating system developed by Chinese company Honor. A security vulnerability exists in the Honor Magic Ui, which stems from the presence of a privilege assignment error vulnerability, successful exploitation of which may result in a device service...

7.5CVSS6.8AI score0.00341EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/12/29 12:00 a.m.•19 views

Honor Magic UI Security Flaw

Honor Magic Ui is an Android-based mobile operating system developed by Chinese company Honor. A security vulnerability exists in Honor Magic UI, which stems from the presence of a type obfuscation vulnerability, successful exploitation of which may lead to information disclosure...

7.1CVSS6.5AI score0.00161EPSS
SaveExploits0References2
Rows per page
Query Builder