Insyde InsydeH2O permission permission and access control issues vulnerability (CNVD-2022-10271)

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. Operating System H2O UEFI firmware is vulnerable to permission and access control issues, which can be...

CVE-2021-43863

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. The Nextcloud Android app uses content providers to manage its data. Prior to version 3.18.1, the providers FileContentProvider and DiskLruImageCacheFileProvider have security issues an SQL...

CVE-2021-43863

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. The Nextcloud Android app uses content providers to manage its data. Prior to version 3.18.1, the providers FileContentProvider and DiskLruImageCacheFileProvider have security issues an SQL...

Sql injection

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. The Nextcloud Android app uses content providers to manage its data. Prior to version 3.18.1, the providers FileContentProvider and DiskLruImageCacheFileProvider have security issues an SQL...

CVE-2021-43863

CVE-2021-43863 affects the Nextcloud Android app (pre-3.18.1). The vulnerability involves the FileContentProvider (SQL injection) and DiskLruImageCacheFileProvider (insufficient permission control), enabling malicious apps on the same device to access Nextcloud data by bypassing the app’s permiss...

CVE-2021-43863 SQL Injection in FileContentProvider (GHSL-2021-1007)

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. The Nextcloud Android app uses content providers to manage its data. Prior to version 3.18.1, the providers FileContentProvider and DiskLruImageCacheFileProvider have security issues an SQL...

Google Android 权限许可和访问控制问题漏洞

Google Android is a Linux-based open-source operating system from the US company Google. Google Android elevation of privilege vulnerability can be exploited by attackers to submit special requests that can elevate privileges...

Belloo Permissions and Access Control Issues Vulnerability

Belloo, a "high quality" dating software from Belloo, is vulnerable to permission and access control issues due to a weak password reset mechanism in requestsuser.php, which could be exploited to bypass authentication vulnerabilities and take over an account...

CVE-2021-37044

There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability...

CVE-2021-37044

There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability...

Spoofing

There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability...

CVE-2021-37044

There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability...

CVE-2021-37044

Technical details about CVE-2021-37044 are not publicly provided in the connected documents. No affected product/version or remediation specifics are available here; monitor for updates.

CVE-2021-37056

There is an Improper permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain device information...

CVE-2021-37056

There is an Improper permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain device information...

CVE-2021-37056

There is an Improper permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain device information...

Design/Logic Flaw

There is an Improper permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain device information...

CVE-2021-37056

CVE-2021-37056 concerns an improper permission control vulnerability in Huawei smartphones (EMUI/Magic UI). The core issue is insufficient access restriction that could allow an attacker to obtain certain device information. Public connected sources reference Huawei EMUI/Magic UI implementations ...

CVE-2021-37056

There is an Improper permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain device information...

Xen 权限许可和访问控制问题漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen suffers from a permissions licensing and...