UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the telephony service...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the telephony service...

PT-2023-28539

Name of the Vulnerable Software and Affected Versions Telephony service affected versions not specified Description The issue is related to a possible missing permission check in the telephony service. This could lead to remote information disclosure without needing additional execution privilege...

PT-2023-28537

Name of the Vulnerable Software and Affected Versions Telephony service affected versions not specified Description The issue is related to a possible missing permission check in the telephony service. This could lead to local information disclosure with no additional execution privileges needed...

PT-2023-28538

Name of the Vulnerable Software and Affected Versions Telephony service affected versions not specified Description The issue is related to a possible missing permission check in the telephony service, which could lead to remote information disclosure without requiring additional execution...

CVE-2023-42717: Exposure of Resource to Wrong Sphere

In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed...

PT-2023-28557

Name of the Vulnerable Software and Affected Versions Telephony service affected versions not specified Description The issue is related to a possible missing permission check in the telephony service. This could lead to local information disclosure with no additional execution privileges needed...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the telephony service...

CVE-2023-42732: Missing Authorization

In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42716: Exposure of Resource to Wrong Sphere

In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed...

CVE-2023-42735: Missing Authorization

In telephony service, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed...

CVE-2023-42734: Missing Authorization

In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the telephony service...

CVE-2023-42715: Exposure of Resource to Wrong Sphere

In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the telephony service...

PT-2023-28555 · Unknown · Telephony Service

Name of the Vulnerable Software and Affected Versions: Telephony service affected versions not specified Description: The issue is related to a possible missing permission check in the telephony service. This could lead to local information disclosure with no additional execution privileges neede...

The vulnerability of the ajaxHandler function (ucp/Cdr.class.php) in the web interface for managing IP telephony systems FreePBX allows a hacker to execute arbitrary SQL commands.

The vulnerability of the ajaxHandler function ucp/Cdr.class.php in the web interface for managing IP telephony systems called FreePBX is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary SQL comman...

PT-2023-9644 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a...

CVE-2023-21376

In Telephony, there is a possible way to retrieve the ICCID due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21376

In Telephony, there is a possible way to retrieve the ICCID due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...