1232 matches found
CVE-2024-6780
The mobile application com.android.server.telecom is vulnerable to improper permission control , specifically categorized under CWE-732 (Incorrect Permission Assignment for Critical Resource). This flaw may lead to user information security risks . While affected Android versions are not specifie...
PT-2024-37861
Name of the Vulnerable Software and Affected Versions Android versions affected versions not specified Description The issue is related to improper permission control in the mobile application, specifically in the com.android.server.telecom component, which may lead to user information security...
CVE-2024-6780: Incorrect Permission Assignment for Critical Resource
Improper permission control in the mobile application com.android.server.telecom may lead to user information security risks...
GHSA-5JQ8-Q6RJ-9GQ4 Red-DiscordBot vulnerable to Incorrect Authorization in commands API
Impact Due to a bug in Red's Core API, 3rd-party cogs using the @commands.canmanagechannel command permission check without additional permission controls may authorize a user to run a command even when that user doesn't have permissions to manage a channel. None of the core commands or core cogs...
CVE-2024-36682
The PrestaShop module **
CVE-2023-25646 Permission and Access Control Vulnerability in ZTE H388X
There is an unauthorized access vulnerability in ZTE H388X. If H388X is caused by brute-force serial port cracking,attackers with common user permissions can use this vulnerability to obtain elevated permissions on the affected device by performing specific operations...
CVE-2024-4988
The mobile application com.transsion.videocallenhancer interface has improper permission control, which can lead to the risk of private file leakage...
CVE-2024-4988 Improper permission control in com.transsion.videocallenhancer
The mobile application com.transsion.videocallenhancer interface has improper permission control, which can lead to the risk of private file leakage...
CVE-2024-4988
The mobile application com.transsion.videocallenhancer version 1.1.9.973 is vulnerable to improper permission control within its interface. This flaw allows for the risk of private file leakage , potentially leading to unauthorized access to sensitive data. To mitigate this risk, it is recommende...
CVE-2024-4988 Improper permission control in com.transsion.videocallenhancer
The mobile application com.transsion.videocallenhancer interface has improper permission control, which can lead to the risk of private file leakage...
CVE-2023-52721
The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality...
CVE-2023-52721
The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality...
CVE-2023-52721: Undefined Security Weakness
The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality...
CVE-2023-52721
The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality...
CVE-2023-52721
CVE-2023-52721 corresponds to a privilege-control vulnerability in Huawei HarmonyOS, specifically within the WindowManager module. The NVD entry describes a local, low-complexity issue (AV:L/AC:L/PR:L/UI:N/S:U) with the potential confidentiality impact (C:H) and no integrity/availability impact r...
CVE-2023-52721
The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality...
PT-2024-14711
Name of the Vulnerable Software and Affected Versions Huawei HarmonyOS/EMUI affected versions not specified Description The issue concerns a vulnerability in the permission control of the WindowManager module. This vulnerability may allow improper access to system resources, potentially affecting...
PT-2024-22907 · Ros2 · Ros2
Name of the Vulnerable Software and Affected Versions: ROS2 Humble Hawksbill versions 2 Description: An issue in the permission and access control components allows attackers to execute arbitrary code, cause a denial of service DoS, escalate privileges, and obtain sensitive information via the...