Lucene search
+L

3335 matches found

NVD
NVD
•added 2022/03/30 4:15 p.m.•40 views

CVE-2021-39782

In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS0.00104EPSS
SaveExploits0References1
Prion
Prion
•added 2022/03/30 4:15 p.m.•37 views

Design/Logic Flaw

In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

4.6CVSS7.8AI score0.00104EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/03/30 4:15 p.m.•24 views

Information disclosure

In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

2.1CVSS5.5AI score0.00111EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/03/30 4:02 p.m.•40 views

CVE-2021-39782

In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

8.1AI score0.00104EPSS
SaveExploits0References1
CVE
CVE
•added 2022/03/30 4:02 p.m.•95 views

CVE-2021-39782

The CVE-2021-39782 issue affects Android 12L Telephony, enabling a local elevation of privilege via unauthorized modification of the PLMN SIM file due to a missing permission check. Exploitation is described as local with no user interaction; the Android 12L security release notes indicate mitiga...

7.8CVSS7.8AI score0.00104EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/03/30 4:02 p.m.•35 views

CVE-2021-39777

In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

5.9AI score0.00111EPSS
SaveExploits0References1
CVE
CVE
•added 2022/03/30 4:02 p.m.•95 views

CVE-2021-39777

CVE-2021-39777 affects Android 12L Telephony. The issue is a missing permission check that can disclose whether an app is installed, leaking information locally without user interaction and without requiring extra privileges. Documented impact is information disclosure with a LOCAL attack vector ...

5.5CVSS5.5AI score0.00111EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/03/30 12:00 a.m.•1 views

PT-2022-11055

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no...

5.5CVSS5.9AI score0.00111EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/03/30 12:00 a.m.•16 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which stems from a lack of privilege checking in Telephony, which could lead to unauthorized modification of PLMN SIM files. An attacker could exploit...

7.8CVSS5.7AI score0.00104EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/30 12:00 a.m.•6 views

CVE-2021-39777: Exposure of Resource to Wrong Sphere

In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

5.5CVSS6AI score0.00111EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/03/30 12:00 a.m.•2 views

PT-2022-11060

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileg...

7.8CVSS5.8AI score0.00104EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/03/30 12:00 a.m.•13 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that stems from a lack of permission checking in Telephony. An attacker could use this vulnerability to obtain sensitive information...

5.5CVSS5.7AI score0.00111EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/30 12:00 a.m.•5 views

CVE-2021-39782: Improper Privilege Management

In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS7.3AI score0.00104EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/03/07 12:00 a.m.•19 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Pixel Telephony in Google Android. There is no information about this vulnerability yet, so stay tuned to CNNVD or the vendor's announcement...

10CVSS6.5AI score0.00518EPSS
SaveExploits0References4
CNVD
CNVD
•added 2022/02/15 12:00 a.m.•62 views

Samsung telephony information disclosure vulnerability (CNVD-2022-70759)

Samsung Telephony is a telephony feature of Samsung mobile devices. samsung telephony is vulnerable to an information disclosure vulnerability that results from a configuration error in the network system or product during operation. An attacker could use the vulnerability to obtain Cell Location...

5.5CVSS1.6AI score0.00105EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/02/15 12:00 a.m.•18 views

Vicidial 安全漏洞

Vicidial is a software suite from Vicidial, Inc. designed to interact with the Asterisk open source Pbx telephony system as a complete inbound/outbound contact center suite with inbound email support. Vicidial suffers from a cross-site scripting vulnerability that stems from the discovery of a...

5.4CVSS5.4AI score0.00562EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/02/11 6:15 p.m.•13 views

CVE-2022-22291

Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device...

5.5CVSS6.1AI score0.00105EPSS
SaveExploits0References2
OSV
OSV
•added 2022/02/11 6:15 p.m.•16 views

CVE-2022-22291

Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device...

5.5CVSS6.1AI score0.00105EPSS
SaveExploits0References1
NVD
NVD
•added 2022/02/11 6:15 p.m.•36 views

CVE-2022-22291

Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device...

5.5CVSS0.00105EPSS
SaveExploits0References1
Prion
Prion
•added 2022/02/11 6:15 p.m.•30 views

Code injection

Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device...

2.1CVSS5.4AI score0.00105EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder