PT-2023-22399 · Yandex · Yandex Navigator

Name of the Vulnerable Software and Affected Versions: Yandex Navigator version 6.60 Description: An issue in Yandex Navigator allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files. Recommendations: For Yandex Navigator version 6.60, consider...

CVE-2023-29757: Insecure Storage of Sensitive Information

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files...

CVE-2023-29751: Origin Validation Error

An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files...

CVE-2023-29758: Incorrect Authorization

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files...

CVE-2023-29756

An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files...

CVE-2023-29761

Sleep v.20230303 for Android is affected by an issue where unauthorized apps can cause a persistent denial-of-service by manipulating SharedPreference files. Root cause: improper access control or handling of SharedPreferences that allows local attackers with no privileges to influence app state,...

CVE-2023-29751

An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files...

CVE-2023-29757

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files...

CVE-2023-29755

An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files...

CVE-2023-29757

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files...

Urbandroid Sleep 安全漏洞

Urbandroid Sleep is an app from Urbandroid Inc. which is used to track the sleep of customers. A security vulnerability exists in Urbandroid Sleep version v.20230303 that originates from an unauthorized application causing a persistent denial of service by manipulating the SharedPreference file...

CVE-2023-29753

An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows a local attacker to cause a denial of service via the SharedPreference files...

CVE-2023-29761: Incorrect Authorization

An issue found in Sleep v.20230303 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files...

CVE-2023-29758

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files...

CVE-2023-29755

The CVE-2023-29755 entry concerns Twilight v13.3 on Android. It describes a local privilege-escalation vulnerability where untrusted apps can manipulate the app’s SharedPreference files to gain privileges. Documented impact is high (CVE CVSS 3.1: Local attack, no privileges required, user interac...

CVE-2023-29749

CVE-2023-29749 affects Yandex Navigator for Android (version 6.60). The vulnerability allows unauthorized apps to escalate privileges by manipulating SharedPreference files, as described across multiple sources. Root cause: improper handling/access to SharedPreference data enabling local, user-in...

CVE-2023-29756: Origin Validation Error

An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files...

CVE-2023-29749: Undefined Security Weakness

An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files...

CVE-2023-29753: Origin Validation Error

An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows a local attacker to cause a denial of service via the SharedPreference files...

CVE-2023-29755: Insecure Storage of Sensitive Information

An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files...