1447 matches found
GHSA-9H6H-9G78-86F7 Yapscan's report receiver server vulnerable to path traversal and log injection
Impact If you make use of the report receiver server experimental, a client may be able to forge requests such that arbitrary files on the host can be overwritten subject to permissions of the yapscan server, leading to loss of data. This is particularly problematic if you do not authenticate...
CVE-2022-20536
In registerBroadcastReceiver of RcsService.java, there is a possible way to change preferred TTY mode due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
PT-2022-14749 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing permission check in the registerBroadcastReceiver method of RcsService.java. This could allow for a local escalation of privilege without requiring additional executio...
Transfering GovNFT does not update mapping userDebt
Lines of code Vulnerability details Impact Because of not updating the mapping userDebt for receiver userDebtfor on the transfer of GovNFT token, the receiver may be harmed, because of not getting collected fees. Proof of Concept Function transfer... is not updated for userDebtfor, here. Tools Us...
Auto desktop launch feature is not working for receiver for web
The auto desktop launch feature is not working...
Storefront Console crashes when clicking configuration at node Manage Receiver for Web sites
Storefront Console crashes when clicking configuration at node Manage Receiver for Web sites.The Store Front has successfully upgraded from 7.15 to 2203 LTSR...
Design/Logic Flaw
Nextcould talk android is the android OS implementation of the nextcloud talk chat system. In affected versions the receiver is not protected by broadcastPermission allowing malicious apps to monitor communication. It is recommended that the Nextcloud Talk Android is upgraded to 14.1.0. There are...
CVE-2022-41926 Nextcloud Talk Android broadcast incorrect permission handling
Nextcould talk android is the android OS implementation of the nextcloud talk chat system. In affected versions the receiver is not protected by broadcastPermission allowing malicious apps to monitor communication. It is recommended that the Nextcloud Talk Android is upgraded to 14.1.0. There are...
Nextcloud Talk 安全漏洞
Nextcloud Talk is a self-hosted local audio/video and chat communication service from Nextcloud Germany. A security vulnerability exists in versions prior to Nextcloud Talk 14.1.0 that stems from the receiver not being protected by broadcastPermission, allowing malicious applications to monitor...
The vulnerability of the Windows Digital Media Receiver component in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Digital Media Receiver component in operating systems with Windows is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
LineLib.sendOutTokenOrETH() may not be compatible with contract receiver because of use of transfer()
Lines of code Vulnerability details Impact LineLib.sendOutTokenOrETH may revert when its receiver is a contract, preventing it from receiving ETH, and thus from much of the functionality of the protocol. Proof of Concept LineLib.sendOutTokenOrETH is as follows. / @notice - Send ETH or ERC20 token...
CVE-2022-41095
Windows Digital Media Receiver Elevation of Privilege Vulnerability...
CVE-2022-41095
Windows Digital Media Receiver Elevation of Privilege Vulnerability...
Privilege escalation
Windows Digital Media Receiver Elevation of Privilege Vulnerability...
CVE-2022-41095
Windows Digital Media Receiver Elevation of Privilege Vulnerability...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2022 Release 1, which originates from an improper access control vulnerability in...
CVE-2022-41095
Technical details about CVE-2022-41095 are not present in the provided connected documents. The OpenVAS entries reference the CVE as part of Windows updates (KB5019966/KB5019980/KB5020003), but do not expose affected components, exploit vectors, or fixes beyond association.
CVE-2022-41095 Windows Digital Media Receiver Elevation of Privilege Vulnerability
...
