Information disclosure

Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could lead to sensitive information disclosure...

CVE-2021-39980

Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could lead to sensitive information disclosure...

CVE-2021-39980

CNVD-2022-08457 describes an unspecified vulnerability in Huawei HarmonyOS where an attacker can bypass privileges to access IMSI. The Huawei HarmonyOS component and root cause are not detailed in the entry, and there is no remediation information provided. Action: monitor for updates.

CVE-2021-39978

Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues...

CVE-2021-39978

CVE-2021-39978 is a SQL injection vulnerability in the Telephony application, described in NVD as enabling privacy/security issues. At base, it is a network-exposed flaw with low attack complexity and no authentication required (CVSS v3.1: 7.5 HIGH; Confidentiality Impact: HIGH; Integrity/Availab...

CVE-2021-39978: Improper Neutralization of Special Elements used in an SQL Command

Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues...

PT-2022-11106

Name of the Vulnerable Software and Affected Versions Telephony application affected versions not specified Description The telephony application has an issue where sensitive information can be exposed to unauthorized actors. Successful exploitation of this issue could lead to the disclosure of...

PT-2022-11104

Name of the Vulnerable Software and Affected Versions Telephony application affected versions not specified Description The telephony application has a SQL Injection issue. Successful exploitation of this issue may cause privacy and security problems. Recommendations At the moment, there is no...

CVE-2021-39980: Exposure of Sensitive Information to an Unauthorized Actor

Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could lead to sensitive information disclosure...

ASB-A-208267659

In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to an unhandled exception. In rare instances, this could lead to local denial of service with User execution privileges needed. User interaction is not needed f...

SLICAN WebCTI Cross-Site Scripting Vulnerability

SLICAN WebCTI is a telephony application. A cross-site scripting vulnerability exists in SLICAN WebCTI version 1.01 2015, which can be exploited by an attacker to steal a user's session by injecting malicious JavaScript code, which can lead to session hijacking and result in theft of user...

SLICAN WebCTI 跨站脚本漏洞

SLICAN WebCTI is a telephony application. A cross-site scripting vulnerability exists in SLICAN WebCTI version 1.01 2015, which can be exploited by an attacker to steal a user's session by injecting malicious JavaScript code, which can lead to session hijacking and result in theft of user...

ROS-20211223-05

Asterisk computer telephony application vulnerability involves an input validation error. Exploitation The vulnerability could allow a remote attacker to send a packet containing an unsupported multimedia format and perform a denial of service DoS attack. unsupported media format and perform a...

CVE-2021-25512

An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities...

CVE-2021-25512

An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities...

CVE-2021-25512

An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities...

Input validation

An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities...

CVE-2021-25512

CVE-2021-25512 affects the Samsung telephony stack. Connected documents indicate an improper validation vulnerability in telephony prior to Samsung SMR Dec-2021 Release 1, allowing attackers to launch certain activities. Affected: telephony component on Samsung devices (prior to SMR Dec-2021 Rele...

CVE-2021-25512

An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities...

PT-2021-16702

Name of the Vulnerable Software and Affected Versions telephony versions prior to SMR Dec-2021 Release 1 Description An improper validation issue in telephony allows attackers to launch certain activities. Recommendations For versions prior to SMR Dec-2021 Release 1, update to SMR Dec-2021 Releas...