CVE-2024-20534: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting XSS attacks against users. This vulnerabilit...

CVE-2024-51517

Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51517

Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51517

Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51517

CVE-2024-51517 affects Huawei HarmonyOS, with the phone/Telephony Services module suffering from improper memory access. The impact is availability loss (exploit locally with low complexity; requires low privileges; no user interaction). Several sources corroborate the vulnerability in HarmonyOS,...

CVE-2024-51517

Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability...

PT-2024-34680 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: The issue is related to improper memory access in the phone service module. Successful exploitation of this vulnerability may affect availability. Recommendations: At the moment, there is...

CVE-2024-51517: Improper Validation of Array Index

Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability...

PT-2024-26100 · Crane · Crane

Name of the Vulnerable Software and Affected Versions: Crane versions prior to SMR Nov-2024 Release 1 Description: The issue is related to incorrect default permissions, allowing local attackers to access files with phone privilege. Recommendations: For versions prior to SMR Nov-2024 Release 1,...

PHPGurukul Teachers Record Management System 安全漏洞

Teachers Record Management System is a teacher record management system. Teachers Record Management System is vulnerable to a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability in the add-teacher.php file via a cell phone number or email parameter. No detail...

CVE-2024-37573

The Talkatone com.talkatone.android application version 8.4.6 for Android contains a security vulnerability that allows any installed application, even those with no permissions, to place phone calls without user interaction. This is caused by the ability of an attacker to send a crafted intent t...

CVE-2024-37573

The Talkatone com.talkatone.android application 8.4.6 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.talkatone.vedroid.ui.launcher.OutgoingCallInterceptor component...

CVE-2024-37573: Undefined Security Weakness

The Talkatone com.talkatone.android application 8.4.6 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.talkatone.vedroid.ui.launcher.OutgoingCallInterceptor component...

CVE-2017-20195

A vulnerability was found in LUNAD3v AreaLoad up to 1a1103182ed63a06dde63d1712f3262eda19c3ec. It has been rated as critical. This issue affects some unknown processing of the file request.php. The manipulation of the argument phone leads to sql injection. This product does not use versioning. Thi...

PT-2024-10604 · Unknown · Lunad3V Areaload

Name of the Vulnerable Software and Affected Versions: LUNAD3v AreaLoad up to 1a1103182ed63a06dde63d1712f3262eda19c3ec Description: A critical issue affects the processing of the file request.php, where the manipulation of the phone argument leads to sql injection. The estimated number of...

AreaLoad SQL注入漏洞

AreaLoad is an open source job upload platform written in PHP by Lizihu Utopia LUNA Association. AreaLoad suffers from an SQL injection vulnerability that stems from the parameter phone in the file request.php that can lead to SQL injection...

CVE-2017-20195: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in LUNAD3v AreaLoad up to 1a1103182ed63a06dde63d1712f3262eda19c3ec. It has been rated as critical. This issue affects some unknown processing of the file request.php. The manipulation of the argument phone leads to sql injection. This product does not use versioning. Thi...

CVE-2020-26306 GHSL-2020-296: Regular Expression Denial of Service (ReDoS) in Knwl.js

Knwl.js is a Javascript library that parses through text for dates, times, phone numbers, emails, places, and more. Versions 1.0.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are...

PT-2024-10796 · Knwl.Js · Knwl.Js

Name of the Vulnerable Software and Affected Versions: Knwl.js versions 1.0.2 and prior Description: The issue concerns a Regular Expression Denial of Service ReDoS in the Knwl.js library, which is used for parsing text to extract information such as dates, times, phone numbers, and more. No...

CVE-2022-30360

OvalEdge 5.2.8.0 and earlier is affected by multiple Stored XSS AKA Persistent or Type II vulnerabilities via a POST request to /profile/updateProfile via the slackid or phone parameters. Authentication is required...