Lucene search
+L

3335 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/18 12:00 a.m.•7 views

CVE-2020-0285: Missing Authorization

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253479...

5.5CVSS5.8AI score0.00136EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/18 12:00 a.m.•6 views

CVE-2020-0265: Missing Authorization

In Telephony, there are possible leaks of sensitive data due to missing permission checks. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150155839...

5.5CVSS5.8AI score0.00139EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/09/18 12:00 a.m.•4 views

PT-2020-11638

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in Telephony due to a missing permission check. This could lead to local information disclosure without requiring additional execution privileges. User...

5.5CVSS0.00136EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/18 12:00 a.m.•7 views

CVE-2020-0284: Missing Authorization

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253784...

5.5CVSS5.8AI score0.00136EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/09/18 12:00 a.m.•2 views

PT-2020-11630

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in Telephony due to a missing permission check. This could lead to local information disclosure without requiring additional execution privileges. User...

5.5CVSS0.00133EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/18 12:00 a.m.•8 views

CVE-2020-0316: Missing Authorization

In Telephony, there is a missing permission check. This could lead to local information disclosure of radio data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154934919...

5.5CVSS5.8AI score0.00132EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/09/18 12:00 a.m.•3 views

PT-2020-11669

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing permission check in Telephony, which could lead to local information disclosure of radio data. No additional execution privileges are needed for exploitation, and user...

5.5CVSS0.00132EPSS
SaveExploits0References3
OSV
OSV
•added 2020/09/17 9:15 p.m.•13 views

CVE-2020-0375

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege and the setting of supported EUICC countries with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8CVSS7.2AI score0.00163EPSS
SaveExploits0References1
NVD
NVD
•added 2020/09/17 9:15 p.m.•29 views

CVE-2020-0375

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege and the setting of supported EUICC countries with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8CVSS0.00163EPSS
SaveExploits0References1
Prion
Prion
•added 2020/09/17 9:15 p.m.•30 views

Design/Logic Flaw

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege and the setting of supported EUICC countries with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.2CVSS8.1AI score0.00163EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/09/17 8:58 p.m.•58 views

CVE-2020-0375

CVE-2020-0375 pertains to Android 11 Telephony: a missing permission check enables local escalation of privilege, allowing an attacker to influence EUICC country settings without extra privileges or user interaction. Several connected sources corroborate: Red Hat and CNVD entries describe a Telep...

7.8CVSS8.2AI score0.00163EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/09/17 8:58 p.m.•34 views

CVE-2020-0375

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege and the setting of supported EUICC countries with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

8.4AI score0.00163EPSS
SaveExploits0References1
OSV
OSV
•added 2020/09/17 4:15 p.m.•14 views

CVE-2020-0396

In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10...

5.5CVSS6.7AI score0.00183EPSS
SaveExploits0References1
NVD
NVD
•added 2020/09/17 4:15 p.m.•24 views

CVE-2020-0396

In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10...

5.5CVSS0.00183EPSS
SaveExploits0References1
Prion
Prion
•added 2020/09/17 4:15 p.m.•28 views

Information disclosure

In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10...

4.9CVSS5.8AI score0.00183EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2020/09/17 3:46 p.m.•3 views

CVE-2020-0396

In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10...

6.8CVSS0.00183EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/09/17 3:46 p.m.•43 views

CVE-2020-0396

In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10...

5.4AI score0.00183EPSS
SaveExploits0References1
CVE
CVE
•added 2020/09/17 3:46 p.m.•140 views

CVE-2020-0396

CVE-2020-0396 is a system/component issue in Android Telephony related to an unsafe PendingIntent that can bypass permissions, enabling local information disclosure without user interaction. Affected Android versions include 8.0 (Oreo) through 11, with evidence in NVD and Android Security Bulleti...

5.5CVSS5AI score0.00183EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/09/17 12:00 a.m.•2 views

PT-2020-11728

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a permission bypass in Telephony due to a missing permission check. This could lead to local escalation of privilege, allowing the setting of supported EUICC countries without...

7.8CVSS0.00163EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/17 12:00 a.m.•6 views

CVE-2020-0375: Missing Authorization

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege and the setting of supported EUICC countries with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8CVSS5.9AI score0.00163EPSS
SaveExploits0References2
Rows per page
Query Builder