Lucene search
+L

8167 matches found

Positive Technologies
Positive Technologies
•added 2025/01/08 12:00 a.m.•15 views

PT-2025-3287 · Unknown · Uiextension

Name of the Vulnerable Software and Affected Versions: UIExtension module affected versions not specified Description: The issue is related to a cross-process screen stack vulnerability in the UIExtension module. Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS6.8AI score0.0021EPSS
SaveExploits0References4
NVD
NVD
•added 2025/01/06 10:15 p.m.•35 views

CVE-2024-53934

The com.windymob.callscreen.ringtone.callcolor.colorphone aka Color Phone Call Screen Themes application through 1.1.2 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.frovis.androidbase.call.DialerActivi...

7.7CVSS0.00166EPSS
SaveExploits0References2
NVD
NVD
•added 2025/01/06 10:15 p.m.•38 views

CVE-2024-53936

The com.asianmobile.callcolor aka Color Phone Call Screen App application through 24 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.asianmobile.callcolor.ui.component.call.CallActivity component...

6.3CVSS0.00222EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/01/06 12:00 a.m.•36 views

CVE-2024-53936

The com.asianmobile.callcolor aka Color Phone Call Screen App application through 24 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.asianmobile.callcolor.ui.component.call.CallActivity component...

0.00222EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/01/06 12:00 a.m.•12 views

CVE-2024-53934

The com.windymob.callscreen.ringtone.callcolor.colorphone aka Color Phone Call Screen Themes application through 1.1.2 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.frovis.androidbase.call.DialerActivi...

6.8AI score0.00166EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/01/06 12:00 a.m.•12 views

CVE-2024-53936

The com.asianmobile.callcolor aka Color Phone Call Screen App application through 24 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.asianmobile.callcolor.ui.component.call.CallActivity component...

6.8AI score0.00222EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/01/06 12:00 a.m.•16 views

BG.Studio Color Phone Call Screen App 安全漏洞

BG.Studio Color Phone Call Screen App BG.Studio com.asianmobile.callcolor is a color phone call screen application from BG.Studio, Inc. A security vulnerability exists in BG.Studio Color Phone Call Screen App version 1.1.2 and earlier, which stems from a vulnerability that allows any application ...

7.7CVSS6.6AI score0.00166EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/01/06 12:00 a.m.•17 views

BG.Studio Color Phone Call Screen App 安全漏洞

BG.Studio Color Phone Call Screen App BG.Studio com.asianmobile.callcolor is a color phone call screen app from BG.Studio. A security vulnerability exists in the BG.Studio Color Phone Call Screen App Android24 version that originates from allowing any application to send a crafted call via the...

6.3CVSS6.6AI score0.00222EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/01/06 12:00 a.m.•38 views

CVE-2024-53934

The com.windymob.callscreen.ringtone.callcolor.colorphone aka Color Phone Call Screen Themes application through 1.1.2 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.frovis.androidbase.call.DialerActivi...

0.00166EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/01/06 12:00 a.m.•13 views

HK DEVERLOP: Personalize Your World Call Theme & Call Screen 安全漏洞

HK DEVERLOP: Personalize Your World Call Theme & Call Screen is a call theme screen from HK DEVERLOP: Personalize Your World. A security vulnerability exists in HK DEVERLOP: Personalize Your World Call Theme & Call Screen version 1.0.7 and earlier, which originates from a call that can be sent vi...

6.3CVSS6.6AI score0.00223EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/06 12:00 a.m.•0 views

CVE-2024-53932: Incorrect Permission Assignment for Critical Resource

The com.remi.colorphone.callscreen.calltheme.callerscreen aka Color Phone: Call Screen Theme application through 21.1.9 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

9.1CVSS5.8AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/06 12:00 a.m.•30 views

CVE-2024-53932

The com.remi.colorphone.callscreen.calltheme.callerscreen aka Color Phone: Call Screen Theme application through 21.1.9 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

0.00354EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/06 12:00 a.m.•18 views

PT-2025-3003 · Asianmobile · Com.Asianmobile.Callcolor

Name of the Vulnerable Software and Affected Versions: com.asianmobile.callcolor aka Color Phone Call Screen App version 24 for Android Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via the...

6.3CVSS6.4AI score0.00222EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/06 12:00 a.m.•1 views

CVE-2024-53934: Improper Preservation of Permissions

The com.windymob.callscreen.ringtone.callcolor.colorphone aka Color Phone Call Screen Themes application through 1.1.2 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.frovis.androidbase.call.DialerActivi...

7.7CVSS5.8AI score0.00166EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/06 12:00 a.m.•0 views

CVE-2024-53933: Undefined Security Weakness

The com.callerscreen.colorphone.themes.callflash aka Color Call Theme & Call Screen application through 1.0.7 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

6.3CVSS5.8AI score0.00223EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/06 12:00 a.m.•15 views

PT-2025-3001 · Unknown · Com.Windymob.Callscreen.Ringtone.Callcolor.Colorphone +1

Name of the Vulnerable Software and Affected Versions: com.windymob.callscreen.ringtone.callcolor.colorphone aka Color Phone Call Screen Themes versions 1.1.2 and earlier Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via th...

7.7CVSS6.5AI score0.00166EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/06 12:00 a.m.•2 views

CVE-2024-53936: Undefined Security Weakness

The com.asianmobile.callcolor aka Color Phone Call Screen App application through 24 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.asianmobile.callcolor.ui.component.call.CallActivity component...

6.3CVSS5.8AI score0.00222EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/03 1:15 a.m.•28 views

CVE-2024-43764

In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00085EPSS
SaveExploits0References2
OSV
OSV
•added 2025/01/03 1:15 a.m.•12 views

CVE-2024-43764

In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00085EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/03 12:00 a.m.•1 views

CVE-2024-43764: Undefined Security Weakness

In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.8AI score0.00085EPSS
SaveExploits0References1
Rows per page
Query Builder