Lucene search
+L

3335 matches found

OSV
OSV
•added 2021/03/10 5:15 p.m.•15 views

CVE-2021-0380

In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony settings due to a missing permission check. This could lead to local escalation of privilege during the onboarding flow with no additional execution privileges needed. User interaction...

7.8CVSS7.2AI score0.00127EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/03/10 5:15 p.m.•8 views

CVE-2021-0380

In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony settings due to a missing permission check. This could lead to local escalation of privilege during the onboarding flow with no additional execution privileges needed. User interaction...

7.8CVSS7.4AI score0.00127EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/03/10 4:02 p.m.•42 views

CVE-2021-0380

In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony settings due to a missing permission check. This could lead to local escalation of privilege during the onboarding flow with no additional execution privileges needed. User interaction...

7.9AI score0.00127EPSS
SaveExploits0References1
CVE
CVE
•added 2021/03/10 4:02 p.m.•75 views

CVE-2021-0380

CVE-2021-0380 affects Android 11 via DcTracker.java onReceive, where a missing permission check allows triggering a provisioning URL and altering telephony settings, enabling local elevation of privilege during onboarding without extra privileges. Exploitation requires no user interaction per the...

7.8CVSS7.7AI score0.00127EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/03/10 12:00 a.m.•1 views

PT-2021-13058

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: A missing permission check in the onReceive function of DcTracker.java allows for the potential triggering of a provisioning URL and modification of other telephony settings. This could lead to a local...

7.8CVSS0.00127EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/03/02 12:00 a.m.•16 views

Google Android 安全特征问题漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android/Pixel has a security vulnerability that stems from a lack of privilege checking in Telephony, which could bypass privileges. This could lead to local privilege escalation...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References3
OSV
OSV
•added 2020/12/14 10:15 p.m.•17 views

CVE-2020-0468

In listen and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS6.2AI score0.0015EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/12/14 10:15 p.m.•8 views

CVE-2020-0468

In listen and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS5.6AI score0.0015EPSS
SaveExploits0References2
Fedora
Fedora
•added 2020/11/28 2:04 a.m.•43 views

[SECURITY] Fedora 33 Update: asterisk-17.9.0-1.fc33

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

6.5CVSS1.1AI score0.01516EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2020/10/25 12:00 a.m.•36 views

Oracle E-Business Suite Advanced Outbound Telephony Cross-Site Scripting (CVE-2020-2856)

A cross-site scripting vulnerability exists in Oracle E-Business Suite Advanced Outbound Telephony. Successful exploitation of this vulnerability could allow remote attackers to inject arbitrary web script into the affected system...

5.8CVSS4.6AI score0.01314EPSS
SaveExploits0
CNVD
CNVD
•added 2020/09/22 12:00 a.m.•11 views

Google Android Information Disclosure Vulnerability (CNVD-2020-60501)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Kernel is one of the kernel components, Framework is one of the Android framework components, System is one of the system components, VPN is one of the VPN Virtual Private Network...

5.5CVSS6.4AI score0.00136EPSS
SaveExploits0References1
OSV
OSV
•added 2020/09/18 4:15 p.m.•13 views

CVE-2020-0316

In Telephony, there is a missing permission check. This could lead to local information disclosure of radio data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154934919...

5.5CVSS6.2AI score0.00132EPSS
SaveExploits0References1
NVD
NVD
•added 2020/09/18 4:15 p.m.•24 views

CVE-2020-0316

In Telephony, there is a missing permission check. This could lead to local information disclosure of radio data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154934919...

5.5CVSS0.00132EPSS
SaveExploits0References1
OSV
OSV
•added 2020/09/18 4:15 p.m.•14 views

CVE-2020-0285

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253479...

5.5CVSS6.2AI score0.00136EPSS
SaveExploits0References1
OSV
OSV
•added 2020/09/18 4:15 p.m.•15 views

CVE-2020-0276

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253586...

5.5CVSS6.2AI score0.00133EPSS
SaveExploits0References1
OSV
OSV
•added 2020/09/18 4:15 p.m.•16 views

CVE-2020-0284

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253784...

5.5CVSS6.2AI score0.00136EPSS
SaveExploits0References1
NVD
NVD
•added 2020/09/18 4:15 p.m.•22 views

CVE-2020-0284

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253784...

5.5CVSS0.00136EPSS
SaveExploits0References1
NVD
NVD
•added 2020/09/18 4:15 p.m.•25 views

CVE-2020-0276

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253586...

5.5CVSS0.00133EPSS
SaveExploits0References1
NVD
NVD
•added 2020/09/18 4:15 p.m.•26 views

CVE-2020-0285

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253479...

5.5CVSS0.00136EPSS
SaveExploits0References1
OSV
OSV
•added 2020/09/18 4:15 p.m.•21 views

CVE-2020-0265

In Telephony, there are possible leaks of sensitive data due to missing permission checks. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150155839...

5.5CVSS6.2AI score0.00139EPSS
SaveExploits0References1
Rows per page
Query Builder