Lucene search
+L

3335 matches found

Cvelist
Cvelist
•added 2022/02/11 5:40 p.m.•45 views

CVE-2022-22291

Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device...

5.5CVSS5.6AI score0.00105EPSS
SaveExploits0References1
CVE
CVE
•added 2022/02/11 5:40 p.m.•143 views

CVE-2022-22291

Technical details about CVE-2022-22291 are not publicly provided in the connected documents. Available sources summarize a logging-related information disclosure in Samsung telephony, but do not specify affected versions, root cause, exploit details, or patches; monitor for updates.

5.5CVSS5.3AI score0.00105EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/02/11 12:00 a.m.•21 views

Samsung telephony 安全漏洞

Samsung Telephony is a telephony feature of Samsung mobile devices. samsung telephony is vulnerable to an information disclosure vulnerability that results from a configuration error in the network system or product during operation. An attacker could use the vulnerability to obtain Cell Location...

5.5CVSS5.6AI score0.00105EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/02/11 12:00 a.m.•2 views

PT-2022-15336

Name of the Vulnerable Software and Affected Versions Telephony software versions prior to SMR Feb-2022 Release 1 Description The issue allows privileged attackers to obtain Cell Location Information through the log of a user device due to the logging of excessive data. Recommendations For versio...

5.5CVSS0.00105EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/11 12:00 a.m.•9 views

CVE-2022-22291: Logging of Excessive Data

Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device...

5.5CVSS6AI score0.00105EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2022/01/14 7:20 a.m.•54 views

Cisco Releases Patch for Critical Bug Affecting Unified CCMP and Unified CCDM

Cisco Systems has rolled out security updates for a critical security vulnerability affecting Unified Contact Center Management Portal Unified CCMP and Unified Contact Center Domain Manager Unified CCDM that could be exploited by a remote attacker to take control of an affected system. Tracked as...

9.6CVSS7.9AI score0.01393EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2022/01/14 5:01 a.m.•15 views

CVE-2022-20658 Cisco Unified Contact Center Management Portal and Unified Contact Center Domain Manager Privilege Escalation Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal Unified CCMP and Cisco Unified Contact Center Domain Manager Unified CCDM could allow an authenticated, remote attacker to elevate their privileges to Administrator. This vulnerability is due t...

9.6CVSS8.3AI score0.01393EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/01/14 5:01 a.m.•41 views

CVE-2022-20658 Cisco Unified Contact Center Management Portal and Unified Contact Center Domain Manager Privilege Escalation Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal Unified CCMP and Cisco Unified Contact Center Domain Manager Unified CCDM could allow an authenticated, remote attacker to elevate their privileges to Administrator. This vulnerability is due t...

9.6CVSS9.3AI score0.01393EPSS
SaveExploits0References1
Cisco
Cisco
•added 2022/01/12 4:00 p.m.•79 views

Cisco Unified Contact Center Management Portal and Unified Contact Center Domain Manager Privilege Escalation Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal Unified CCMP and Cisco Unified Contact Center Domain Manager Unified CCDM could allow an authenticated, remote attacker to elevate their privileges to Administrator. This vulnerability is due t...

9.6CVSS8.3AI score0.01393EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/01/10 2:12 p.m.•11 views

CVE-2022-22272

Improper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to get IMSI without READPRIVILEGEDPHONESTATE permission...

4CVSS5.8AI score0.00102EPSS
SaveExploits0References2
OSV
OSV
•added 2022/01/10 2:12 p.m.•16 views

CVE-2022-22272

Improper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to get IMSI without READPRIVILEGEDPHONESTATE permission...

3.3CVSS5.8AI score0.00102EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/01/10 12:00 a.m.•20 views

Samsung SMR 安全漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in Samsung SMR that originates from improper authorization in TelephonyManager and allows an attacker to gain access to IMSI without the...

4CVSS5AI score0.00102EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/01/07 12:00 a.m.•16 views

PT-2022-15318 · Unknown · Telephonymanager

Name of the Vulnerable Software and Affected Versions: TelephonyManager versions prior to SMR Jan-2022 Release 1 Description: The issue is related to improper authorization in TelephonyManager, allowing attackers to obtain the IMSI without the required READ PRIVILEGED PHONE STATE permission...

4CVSS3.8AI score0.00102EPSS
SaveExploits0References5
OSV
OSV
•added 2022/01/03 10:15 p.m.•13 views

CVE-2021-39980

Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could lead to sensitive information disclosure...

5.3CVSS5.8AI score0.00541EPSS
SaveExploits0References1
OSV
OSV
•added 2022/01/03 10:15 p.m.•13 views

CVE-2021-39978

Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues...

7.5CVSS5.8AI score0.00653EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/01/03 10:15 p.m.•10 views

CVE-2021-39978

Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues...

7.5CVSS7.1AI score0.00653EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2022/01/03 10:15 p.m.•8 views

CVE-2021-39980

Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could lead to sensitive information disclosure...

5.3CVSS6AI score0.00541EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2022/01/03 10:15 p.m.•30 views

CVE-2021-39978

Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues...

7.5CVSS0.00653EPSS
SaveExploits0References1
NVD
NVD
•added 2022/01/03 10:15 p.m.•29 views

CVE-2021-39980

Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could lead to sensitive information disclosure...

5.3CVSS0.00541EPSS
SaveExploits0References1
Prion
Prion
•added 2022/01/03 10:15 p.m.•25 views

Sql injection

Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues...

5CVSS8AI score0.00653EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder