147 matches found
CVE-2021-39628
In StatusBar.java, there is a possible disclosure of notification content on the lockscreen due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
CVE-2021-0478
In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege by running foreground services without notifying the user, with User execution privileges needed. User interaction is not needed for...
CVE-2021-0478
In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege by running foreground services without notifying the user, with User execution privileges needed. User interaction is not needed for...
CVE-2020-35550
An issue was discovered on Samsung mobile devices with O8.x, P9.0, Q10.0, and R11.0 software. Attackers can bypass Factory Reset Protection FRP via StatusBar. The Samsung ID is SVE-2020-17888 December 2020...
Multiple Samsung Products License Issue Vulnerabilities
Samsung mobile devices O are products of Samsung Corporation in South Korea.Samsung mobile devices O is a series of cell phones.Samsung mobile devices P is a series of mobile hard drives.Samsung mobile devices Q is a series of TVs.Samsung mobile devices Q is a series of TVs. Samsung mobile device...
DEBIAN-CVE-2020-11054
In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificate error was overridden by the user, qutebrowser displays the URL as yellow colors.statusbar.url.warn.fg. However, when the affected website was subsequently loaded again, the UR...
CVE-2020-11054
In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificate error was overridden by the user, qutebrowser displays the URL as yellow colors.statusbar.url.warn.fg. However, when the affected website was subsequently loaded again, the UR...
Samsung Mobile Device Input Validation Error Vulnerability (CNVD-2020-32865)
Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An input validation error vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to bypass Factory Reset Protection FRP with the help of a status bar...
CVE-2019-20569
An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can bypass Factory Reset Protection FRP via the status bar. The Samsung ID is SVE-2019-15089 September 2019...
PT-2020-10546
Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P9.0 software Description An issue allows attackers to bypass Factory Reset Protection FRP via the status bar on Samsung mobile devices. Recommendations For Samsung mobile devices with P9.0 software, as a temporary...
CVE-2019-20569: Undefined Security Weakness
An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can bypass Factory Reset Protection FRP via the status bar. The Samsung ID is SVE-2019-15089 September 2019...
Unspecified Vulnerability in Apple iOS Status Bar Component
Apple iOS is an operating system for mobile devices developed by Apple Inc.Status Bar is one of the status bar components. A security vulnerability exists in the Status Bar component in Apple iOS versions prior to 12.3. An attacker could exploit the vulnerability to display a locked icon after...
PT-2019-9079
Name of the Vulnerable Software and Affected Versions Sony Xperia L1 Android device with a build fingerprint of Sony/G3313/G3313:7.0/43.0.A.6.49/2867558199:user/release-keys android framework versionCode=24, versionName=7.0 Description The android framework in the Sony Xperia L1 Android device...
PT-2019-9086
Name of the Vulnerable Software and Affected Versions Leagoo P1 Android device with a build fingerprint of sp7731c 1h10 32v4 bird:6.0/MRA58K/android.20170629.214736:user/release-keys Description The android framework in the Leagoo P1 Android device has been modified, allowing any app on the devic...
PT-2019-9078
Name of the Vulnerable Software and Affected Versions ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US Phone/ASUS X008 1:7.0/NRD90M/US Phone-14.14.1711.92-20171208:user/release-keys Description The android framework in the ASUS ZenFone 3 Max Android device has been modified,...
Design/Logic Flaw
The Vivo V7 Android device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys contains a platform app with a package name of com.vivo.bsptest versionCode=1, versionName=1.0 containing an exported activity app component named com.vivo.bsptest.BSPTestActivity...
Python-Nubia - A Command-Line And Interactive Shell Framework
Nubia is a lightweight framework for building command-line applications with Python. It was originally designed for the “logdevice interactive shell aka. ldshell” at Facebook. Since then it was factored out to be a reusable component and several internal Facebook projects now rely on it as a quic...
Apple iOS Status Bar Component Information Disclosure Vulnerability
Apple iOS is an operating system developed by Apple for mobile devices, and the Status Bar is one of the status bar components. A security vulnerability exists in the Status Bar component in versions of Apple iOS prior to 12. An attacker in close physical proximity could use the vulnerability to...
Apple iOS and macOS High Sierra Status Bar Unauthorized Access Vulnerability
Apple iOS and macOS High Sierra are both products of Apple Inc. Apple iOS is an operating system for mobile devices; macOS High Sierra is a specialized operating system for Mac computers. status bar is one of the status bar components. A security vulnerability exists in the Status Bar component i...
CVE-2018-4173
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Status Bar" component. It allows invisible microphone access via a crafted app...