5289 matches found
CVE-2021-1379
Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone. These vulnerabilities are...
CVE-2021-1379 Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities
Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone. These vulnerabilities are...
CVE-2021-1379: Buffer Copy without Checking Size of Input
Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone. These vulnerabilities are...
Cisco IP Phone Cross-Site Scripting Vulnerability (CNVD-2024-45292)
Cisco IP Phone is a hardware device from the American company Cisco Cisco. IP Phone that provides calling capabilities. The Cisco IP Phone suffers from a cross-site scripting vulnerability that stems from the affected device's WebUI not properly validating user-supplied input. An authenticated,...
bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability
A flaw was found within the handling of the Phone Book Access profile in BlueZ. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a...
bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability
A flaw was found within the handling of the Phone Book Access profile in BlueZ. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a...
bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability
A flaw was found within the handling of the Phone Book Access profile in BlueZ. In certain conditions, a network-adjacent attacker can execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicio...
November 12, 2024âKB5046616 (OS Build 20348.2849)
None None...
Teachers Record Management System add-teacher.php File SQL Injection Vulnerability
Teachers Record Management System is a teacher record management system. Teachers Record Management System is vulnerable to a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability in the add-teacher.php file via a cell phone number or email parameter. No detail...
Cisco IP Phone Information Disclosure Vulnerability
Cisco IP Phone is a hardware device from the American company Cisco Cisco. IP Phone that provides calling capabilities. The Cisco IP Phone suffers from an information disclosure vulnerability that stems from improper storage of sensitive information in the Web UI of the Session Initiation Protoco...
CVE-2024-36064
The NLL com.nll.cb aka ACR Phone application through 0.330-playStore-NoAccessibility-arm8 for Android allows any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.nll.cb.dialer.dialer.DialerActivity component...
CVE-2024-36062
The com.callassistant.android aka AI Call Assistant & Screener application 1.174 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.callassistant.android.ui.call.incall.InCallActivity component...
CVE-2020-11921
An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to hijack an ongoing Bluetooth connection between the Lush 2 and a mobile phone. This allows an attacker to gain full control over the device...
CVE-2024-36064
The NLL com.nll.cb aka ACR Phone application through 0.330-playStore-NoAccessibility-arm8 for Android allows any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.nll.cb.dialer.dialer.DialerActivity component...
CVE-2024-36064
The NLL com.nll.cb aka ACR Phone application through 0.330-playStore-NoAccessibility-arm8 for Android allows any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.nll.cb.dialer.dialer.DialerActivity component...
CVE-2024-36064
The NLL com.nll.cb (known as ACR Phone ) application for Android, specifically versions through 0.330-playStore-NoAccessibility-arm8 , contains a security vulnerability. A malicious application installed on the same device can place phone calls without user interaction by sending a crafted intent...
CVE-2024-36063
The Goodwy com.goodwy.dialer (also known as Right Dialer ) application for Android, affecting versions through 5.1.0 , contains a vulnerability that allows unauthorized phone calls. An attacker can trigger these calls without user interaction by sending a crafted intent to the com.goodwy.dialer.a...
CVE-2024-36062
The com.callassistant.android aka AI Call Assistant & Screener application 1.174 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.callassistant.android.ui.call.incall.InCallActivity component...
CVE-2024-36062
The com.callassistant.android aka AI Call Assistant & Screener application 1.174 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.callassistant.android.ui.call.incall.InCallActivity component...
PT-2024-26876
Name of the Vulnerable Software and Affected Versions com.nll.cb aka ACR Phone versions 0.330-playStore-NoAccessibility-arm8 and earlier Description The issue allows any installed application, without requiring permissions, to place phone calls without user interaction. This is achieved by sendin...