Lucene search
+L

5334 matches found

attackerkb
attackerkb
•added 2022/08/12 3:15 p.m.•15 views

CVE-2022-20260

In the Phone app, there is a possible crash loop due to resource exhaustion. This could lead to local persistent denial of service in the Phone app with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-220865698...

5.5CVSS6.1AI score0.00104EPSS
SaveExploits0References2
Prion
Prion
•added 2022/08/12 3:15 p.m.•33 views

Design/Logic Flaw

In the Phone app, there is a possible crash loop due to resource exhaustion. This could lead to local persistent denial of service in the Phone app with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-220865698...

1.7CVSS5.8AI score0.00104EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/08/12 12:00 a.m.•21 views

Google Android security vulnerabilities

Google Android is a Linux-based open-source operating system from Google, Inc. A security vulnerability exists in Google Android 13, which stems from the disclosure of a registered self-managed phone account in its Telecomm due to a lack of privilege checking, which could lead to the disclosure o...

3.3CVSS5.2AI score0.00094EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/08/12 12:00 a.m.•15 views

Google Android Resource Management Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Google Android the Phone app component, which stems from resource exhaustion and may result in a crash loop...

5.5CVSS5.7AI score0.00104EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/08/12 12:00 a.m.•16 views

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. Google Android 13 suffers from a security vulnerability that stems from a lack of permission checking in Telephony, which could lead to information disclosure, which could result in the disclosure...

5.5CVSS5.7AI score0.00095EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/08/12 12:00 a.m.•20 views

Google Android security vulnerabilities

Google Android is a Linux-based open-source operating system from Google, Inc. A security vulnerability exists in Google Android 13, which stems from the disclosure of a registered self-managed phone account in its Telecomm due to a lack of privilege checking, which could lead to the disclosure o...

3.3CVSS5.2AI score0.00094EPSS
SaveExploits0References2
CVE
CVE
•added 2022/08/11 3:24 p.m.•87 views

CVE-2022-20311

CVE-2022-20311 affects Android 13 Telecomm: a missing permission check could disclose registered self-managed phone accounts, enabling local information disclosure with low risk of exploitation (attack vector LOCAL, UI:N). Root cause is a permission check omission in Telecomm that exposes sensiti...

3.3CVSS4.4AI score0.00094EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/08/11 3:11 p.m.•37 views

CVE-2022-20260

In the Phone app, there is a possible crash loop due to resource exhaustion. This could lead to local persistent denial of service in the Phone app with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-220865698...

6.2AI score0.00104EPSS
SaveExploits0References1
CVE
CVE
•added 2022/08/11 3:11 p.m.•79 views

CVE-2022-20260

CVE-2022-20260 affects the Android Phone app on Android 13. The issue is a resource-exhaustion induced crash loop that can cause local persistent DoS with user privileges and no user interaction needed. The vulnerability is tied to the Phone app’s handling leading to a crash under resource pressu...

5.5CVSS5.9AI score0.00104EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2022/08/11 12:15 p.m.•19 views

CVE-2022-2769

A vulnerability, which was classified as problematic, has been found in SourceCodester Company Website CMS. This issue affects some unknown processing of the file /dashboard/contact. The manipulation of the argument phone leads to cross site scripting. The attack may be initiated remotely. The...

5.4CVSS4.1AI score0.00603EPSS
SaveExploits0References2
Prion
Prion
•added 2022/08/11 12:15 p.m.•32 views

Cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Company Website CMS. This issue affects some unknown processing of the file /dashboard/contact. The manipulation of the argument phone leads to cross site scripting. The attack may be initiated remotely. The...

4.9CVSS5.3AI score0.00603EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/08/11 11:50 a.m.•67 views

CVE-2022-2769

CVE-2022-2769 affects SourceCodester Company Website CMS. The vulnerability is a cross-site scripting flaw in the /dashboard/contact handler where manipulating the phone parameter allows remote exploitation. Multiple connected sources confirm the issue, including Red Hat and CVE records, describi...

5.4CVSS4.4AI score0.00603EPSS
SaveExploits0References2Affected Software1
Wired Threat Level
Wired Threat Level
•added 2022/08/11 11:00 a.m.•32 views

This Anti-Tracking Tool Checks If You’re Being Followed

The Raspberry Pi-powered device can scan for phones around you. If it keeps spotting the same one, it’ll send you an alert...

2.6AI score
SaveExploits0
CNNVD
CNNVD
•added 2022/08/11 12:00 a.m.•19 views

Company Website CMS Cross-Site Script Vulnerabilities

Company Website CMS is a company website/CMS by Torrahclef Personal Developer. Company Website CMS suffers from a cross-site scripting vulnerability that stems from some unknown handling of the file /dashboard/contact being affected, manipulation of the parameter phone can lead to cross-site...

5.4CVSS5AI score0.00603EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/08/11 12:00 a.m.•22 views

PT-2022-14509 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: There is a possible information disclosure in Telephony due to a missing permission check. This could lead to local information disclosure of phone accounts, requiring User execution privileges. No use...

5.5CVSS5.2AI score0.00095EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/11 12:00 a.m.•4 views

CVE-2022-20260: Undefined Security Weakness

In the Phone app, there is a possible crash loop due to resource exhaustion. This could lead to local persistent denial of service in the Phone app with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-220865698...

5.5CVSS6.1AI score0.00104EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/08/11 12:00 a.m.•6 views

PT-2022-14484 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible crash loop due to resource exhaustion in the Phone app, which could lead to local persistent denial of service. This requires User execution privileges and does not...

5.5CVSS5.2AI score0.00104EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/11 12:00 a.m.•9 views

CVE-2022-2769: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Company Website CMS. This issue affects some unknown processing of the file /dashboard/contact. The manipulation of the argument phone leads to cross site scripting. The attack may be initiated remotely. The...

5.4CVSS4.1AI score0.00603EPSS
SaveExploits0References2
Wired Threat Level
Wired Threat Level
•added 2022/08/08 5:17 p.m.•20 views

A Phone Carrier That Doesn’t Track Your Browsing or Location

The new Pretty Good Phone Privacy service for Android hides the data linking you to your mobile device...

3.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/08/08 12:00 a.m.•23 views

PT-2022-18165 · Sourcecodester · Sourcecodester Simple E-Learning System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple E-Learning System affected versions not specified Description: A critical issue affects some unknown functionality of the file /claire blake. The manipulation of the phoneNumber argument leads to SQL injection. The attac...

7.5CVSS7.8AI score0.00666EPSS
SaveExploits1References4
Rows per page
Query Builder