1011 matches found
CVE-2024-45450
Permission control vulnerability in the software update module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
PT-2024-31640 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to a permission control vulnerability in the software update module. Successful exploitation of this vulnerability may affect service confidentiality. Recommendations:...
CVE-2024-42035
Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this vulnerability may affect functionality and confidentiality...
CVE-2024-42035
Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this vulnerability may affect functionality and confidentiality...
CVE-2024-42035
Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this vulnerability may affect functionality and confidentiality...
CVE-2024-42035
Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this vulnerability may affect functionality and confidentiality...
CVE-2024-42035
CVE-2024-42035 concerns a permission control vulnerability in the App Multiplier module. The NVD entry lists a HIGH impact across confidentiality, integrity, and availability with LOCAL attack vector, LOW complexity, and no user interaction required, while Huawei/CNA data cite the same issue with...
CVE-2024-22069
CVE-2024-22069 affects ZTE ZXV10 XT802/ET301. The issue is a permission and access control vulnerability allowing a user with common permissions to log in to the terminal web interface and illegally change the administrator password by intercepting password-change requests. Reported as a network-...
PT-2024-29701 · Unknown · App Multiplier Module
Name of the Vulnerable Software and Affected Versions: App Multiplier module affected versions not specified Description: The issue is related to a permission control vulnerability in the App Multiplier module. Successful exploitation of this vulnerability may affect functionality and...
CVE-2024-6780
Improper permission control in the mobile application com.android.server.telecom may lead to user information security risks...
CVE-2024-6780
The CVE-2024-6780 entry concerns Android’s com.android.server.telecom component with improper permission control that may expose user information. Connected sources (RH and NVD/NVD-like feeds) confirm the affected software module but do not provide additional technical specifics such as exact vul...
PT-2024-37861
Name of the Vulnerable Software and Affected Versions Android versions affected versions not specified Description The issue is related to improper permission control in the mobile application, specifically in the com.android.server.telecom component, which may lead to user information security...
GHSA-5JQ8-Q6RJ-9GQ4 Red-DiscordBot vulnerable to Incorrect Authorization in commands API
Impact Due to a bug in Red's Core API, 3rd-party cogs using the @commands.canmanagechannel command permission check without additional permission controls may authorize a user to run a command even when that user doesn't have permissions to manage a channel. None of the core commands or core cogs...
CVE-2024-36682
CVE-2024-36682 affects the PrestaShop module Theme settings (pk_themesettings) version
CVE-2023-25646 Permission and Access Control Vulnerability in ZTE H388X
There is an unauthorized access vulnerability in ZTE H388X. If H388X is caused by brute-force serial port cracking,attackers with common user permissions can use this vulnerability to obtain elevated permissions on the affected device by performing specific operations...
CVE-2024-4988
The mobile application com.transsion.videocallenhancer interface has improper permission control, which can lead to the risk of private file leakage...
CVE-2024-4988 Improper permission control in com.transsion.videocallenhancer
The mobile application com.transsion.videocallenhancer interface has improper permission control, which can lead to the risk of private file leakage...
CVE-2024-4988 Improper permission control in com.transsion.videocallenhancer
The mobile application com.transsion.videocallenhancer interface has improper permission control, which can lead to the risk of private file leakage...
CVE-2024-4988
The CVE-2024-4988 entry concerns the mobile app com.transsion.videocallenhancer, where improper permission control in the app interface can lead to private file leakage. Red Hat/NVD/CVE references align on a vulnerability in the Transsion TECNO mobile software stack, with public detail indicating...