Lucene search
+L

5289 matches found

CVE
CVE
•added 2024/12/09 1:00 a.m.•91 views

CVE-2024-12353

CVE-2024-12353 affects SourceCodester Phone Contact Manager System 1.0, specifically the User Menu component’s UserInterface::MenuDisplayStart function. The vulnerability arises from improper input validation caused by manipulating the name argument, enabling a local attack. Public exploit detail...

7.8CVSS4.1AI score0.00303EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/09 1:00 a.m.•20 views

CVE-2024-12353 SourceCodester Phone Contact Manager System User Menu MenuDisplayStart input validation

A vulnerability, which was classified as problematic, has been found in SourceCodester Phone Contact Manager System 1.0. This issue affects the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation of the argument name leads to improper input validation. Attacking...

4.8CVSS6.9AI score0.00303EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•8 views

CVE-2024-12355: Improper Input Validation

A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic. Affected by this vulnerability is the function ContactBook::adding of the file ContactBook.cpp. The manipulation leads to improper input validation. The attack needs to be approached...

7.8CVSS5AI score0.0031EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•19 views

SourceCodester Phone Contact Manager System 安全漏洞

SourceCodester Phone Contact Manager System is an open source phone contact management system from SourceCodester. A security vulnerability exists in SourceCodester Phone Contact Manager System version 1.0, which is caused by a buffer overflow issue in the UserInterface::MenuDisplayStart function...

7.8CVSS5.9AI score0.0036EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•9 views

CVE-2024-12354: Buffer Copy without Checking Size of Input

A vulnerability, which was classified as critical, was found in SourceCodester Phone Contact Manager System 1.0. Affected is the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation leads to buffer overflow. It is possible to launch the attack on the local host. T...

7.8CVSS5.7AI score0.0036EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•8 views

CVE-2024-12353: Improper Input Validation

A vulnerability, which was classified as problematic, has been found in SourceCodester Phone Contact Manager System 1.0. This issue affects the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation of the argument name leads to improper input validation. Attacking...

7.8CVSS5.4AI score0.00303EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•17 views

SourceCodester Phone Contact Manager System 安全漏洞

SourceCodester Phone Contact Manager System is an open source phone contact management system from SourceCodester. A security vulnerability exists in version 1.0 of the SourceCodester Phone Contact Manager System, which stems from an incorrect input validation issue contained in the...

7.8CVSS4.4AI score0.0031EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•16 views

SourceCodester Phone Contact Manager System 安全漏洞

SourceCodester Phone Contact Manager System is an open source phone contact management system from SourceCodester. A security vulnerability exists in SourceCodester Phone Contact Manager System version 1.0, which originates from an incorrect input validation issue in the name parameter of the...

7.8CVSS4.6AI score0.00303EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/12/08 12:00 a.m.•22 views

PT-2024-17562 · Sourcecodester · Sourcecodester Phone Contact Manager System

Name of the Vulnerable Software and Affected Versions: SourceCodester Phone Contact Manager System version 1.0 Description: The issue is related to insufficient input validation, which can allow an attacker to execute arbitrary code. It affects the function UserInterface::MenuDisplayStart of the...

7.8CVSS7.5AI score0.00303EPSS
SaveExploits1References10
OSV
OSV
•added 2024/12/06 6:15 p.m.•22 views

CVE-2024-47043

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could enable an attacker to correlate a device serial number and the user's phone number and part of the email address...

5.3CVSS5.7AI score0.00392EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/06 12:00 a.m.•5 views

CVE-2024-47043: Insecure Storage of Sensitive Information

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could enable an attacker to correlate a device serial number and the user's phone number and part of the email address...

8.7CVSS5.6AI score0.00392EPSS
SaveExploits0References1
Wired Threat Level
Wired Threat Level
•added 2024/12/04 5:00 p.m.•21 views

A New Phone Scanner That Detects Spyware Has Already Found 7 Pegasus Infections

The mobile device security firm iVerify has been offering a tool since May that makes spyware scanning accessible to anyone—and it’s already turning up victims...

7.3AI score
SaveExploits0
NVD
NVD
•added 2024/12/04 4:15 p.m.•33 views

CVE-2024-37575

The Mister org.mistergroup.shouldianswer application 1.4.264 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the org.mistergroup.shouldianswer.ui.defaultdialer.DefaultDialerActivity component...

7.5CVSS0.00392EPSS
SaveExploits0References3
NVD
NVD
•added 2024/12/04 4:15 p.m.•42 views

CVE-2024-37574

The GriceMobile com.grice.call application 4.5.2 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.iui.mobile.presentation.MobileActivity...

8.2CVSS0.00355EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/12/04 12:00 a.m.•6 views

PT-2024-27670

Name of the Vulnerable Software and Affected Versions Mister org.mistergroup.shouldianswer version 1.4.264 Description The issue allows any installed application, without requiring permissions, to initiate phone calls without user interaction. This is achieved by sending a crafted intent via the...

7.5CVSS0.00392EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/04 12:00 a.m.•8 views

CVE-2024-37574: Incorrect Permission Assignment for Critical Resource

The GriceMobile com.grice.call application 4.5.2 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.iui.mobile.presentation.MobileActivity...

8.2CVSS5.8AI score0.00355EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/04 12:00 a.m.•33 views

CVE-2024-37574

The GriceMobile com.grice.call application 4.5.2 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.iui.mobile.presentation.MobileActivity...

0.00355EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/04 12:00 a.m.•19 views

CVE-2024-37574

The GriceMobile com.grice.call application 4.5.2 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.iui.mobile.presentation.MobileActivity...

6.8AI score0.00355EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/12/04 12:00 a.m.•37 views

CVE-2024-37575

The Mister org.mistergroup.shouldianswer application 1.4.264 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the org.mistergroup.shouldianswer.ui.defaultdialer.DefaultDialerActivity component...

0.00392EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/12/04 12:00 a.m.•21 views

Mister org.mistergroup.shouldianswer 安全漏洞

Mister org.mistergroup.shouldianswer is an application from Mister, Inc. A security vulnerability exists in Mister org.mistergroup.shouldianswer version 1.4.264, which originates from allowing any installed application to be used via the org.mistergroup.shouldianswer.ui.defaultdialer...

7.5CVSS6.7AI score0.00392EPSS
SaveExploits0References3
Rows per page
Query Builder