Lucene search
+L

5285 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•8 views

CVE-2024-12353: Improper Input Validation

A vulnerability, which was classified as problematic, has been found in SourceCodester Phone Contact Manager System 1.0. This issue affects the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation of the argument name leads to improper input validation. Attacking...

7.8CVSS5.4AI score0.00303EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•17 views

SourceCodester Phone Contact Manager System 安全漏洞

SourceCodester Phone Contact Manager System is an open source phone contact management system from SourceCodester. A security vulnerability exists in version 1.0 of the SourceCodester Phone Contact Manager System, which stems from an incorrect input validation issue contained in the...

7.8CVSS4.4AI score0.0031EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•16 views

SourceCodester Phone Contact Manager System 安全漏洞

SourceCodester Phone Contact Manager System is an open source phone contact management system from SourceCodester. A security vulnerability exists in SourceCodester Phone Contact Manager System version 1.0, which originates from an incorrect input validation issue in the name parameter of the...

7.8CVSS4.6AI score0.00303EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•8 views

CVE-2024-12355: Improper Input Validation

A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic. Affected by this vulnerability is the function ContactBook::adding of the file ContactBook.cpp. The manipulation leads to improper input validation. The attack needs to be approached...

7.8CVSS5AI score0.0031EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/08 12:00 a.m.•22 views

PT-2024-17562 · Sourcecodester · Sourcecodester Phone Contact Manager System

Name of the Vulnerable Software and Affected Versions: SourceCodester Phone Contact Manager System version 1.0 Description: The issue is related to insufficient input validation, which can allow an attacker to execute arbitrary code. It affects the function UserInterface::MenuDisplayStart of the...

7.8CVSS7.5AI score0.00303EPSS
SaveExploits1References10
OSV
OSV
•added 2024/12/06 6:15 p.m.•22 views

CVE-2024-47043

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could enable an attacker to correlate a device serial number and the user's phone number and part of the email address...

5.3CVSS5.7AI score0.00392EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/06 12:00 a.m.•5 views

CVE-2024-47043: Insecure Storage of Sensitive Information

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could enable an attacker to correlate a device serial number and the user's phone number and part of the email address...

8.7CVSS5.6AI score0.00392EPSS
SaveExploits0References1
Wired Threat Level
Wired Threat Level
•added 2024/12/04 5:00 p.m.•21 views

A New Phone Scanner That Detects Spyware Has Already Found 7 Pegasus Infections

The mobile device security firm iVerify has been offering a tool since May that makes spyware scanning accessible to anyone—and it’s already turning up victims...

7.3AI score
SaveExploits0
NVD
NVD
•added 2024/12/04 4:15 p.m.•33 views

CVE-2024-37575

The Mister org.mistergroup.shouldianswer application 1.4.264 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the org.mistergroup.shouldianswer.ui.defaultdialer.DefaultDialerActivity component...

7.5CVSS0.00392EPSS
SaveExploits0References3
NVD
NVD
•added 2024/12/04 4:15 p.m.•42 views

CVE-2024-37574

The GriceMobile com.grice.call application 4.5.2 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.iui.mobile.presentation.MobileActivity...

8.2CVSS0.00355EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/04 12:00 a.m.•8 views

CVE-2024-37574: Incorrect Permission Assignment for Critical Resource

The GriceMobile com.grice.call application 4.5.2 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.iui.mobile.presentation.MobileActivity...

8.2CVSS5.8AI score0.00355EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/04 12:00 a.m.•33 views

CVE-2024-37574

The GriceMobile com.grice.call application 4.5.2 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.iui.mobile.presentation.MobileActivity...

0.00355EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/04 12:00 a.m.•19 views

CVE-2024-37574

The GriceMobile com.grice.call application 4.5.2 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.iui.mobile.presentation.MobileActivity...

6.8AI score0.00355EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/12/04 12:00 a.m.•37 views

CVE-2024-37575

The Mister org.mistergroup.shouldianswer application 1.4.264 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the org.mistergroup.shouldianswer.ui.defaultdialer.DefaultDialerActivity component...

0.00392EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/12/04 12:00 a.m.•21 views

Mister org.mistergroup.shouldianswer 安全漏洞

Mister org.mistergroup.shouldianswer is an application from Mister, Inc. A security vulnerability exists in Mister org.mistergroup.shouldianswer version 1.4.264, which originates from allowing any installed application to be used via the org.mistergroup.shouldianswer.ui.defaultdialer...

7.5CVSS6.7AI score0.00392EPSS
SaveExploits0References3
CVE
CVE
•added 2024/12/04 12:00 a.m.•97 views

CVE-2024-37575

The Mister org.mistergroup.shouldianswer application (version 1.4.264 ) for Android contains a vulnerability that allows any other installed application to place phone calls without user interaction. This is achieved by sending a crafted intent to the org.mistergroup.shouldianswer.ui.default_dial...

7.5CVSS6.8AI score0.00392EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/04 12:00 a.m.•7 views

CVE-2024-37575: Improper Preservation of Permissions

The Mister org.mistergroup.shouldianswer application 1.4.264 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the org.mistergroup.shouldianswer.ui.defaultdialer.DefaultDialerActivity component...

7.5CVSS5.8AI score0.00392EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/04 12:00 a.m.•21 views

GriceMobile com.grice.call 安全漏洞

GriceMobile com.grice.call is an application from GriceMobile, Inc. A security vulnerability exists in GriceMobile com.grice.call version 4.5.2, which originates from allowing any installed application to send a crafted intent to make a phone call without user interaction via...

8.2CVSS6.6AI score0.00355EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/12/04 12:00 a.m.•6 views

PT-2024-27670

Name of the Vulnerable Software and Affected Versions Mister org.mistergroup.shouldianswer version 1.4.264 Description The issue allows any installed application, without requiring permissions, to initiate phone calls without user interaction. This is achieved by sending a crafted intent via the...

7.5CVSS0.00392EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2024/12/04 12:00 a.m.•21 views

Cisco IP Phone 7920 SNMP Information Disclosure (CVE-2005-3803)

Cisco IP Phone VoIP 7920 1.08 contains certain hard-coded fixed public and private SNMP community strings that cannot be changed, which allows remote attackers to obtain sensitive information. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mor...

7.5CVSS5.5AI score0.02146EPSS
SaveExploits0References3
Rows per page
Query Builder