Lucene search
+L

136 matches found

CVE
CVE
•added 2022/11/08 12:00 a.m.•78 views

CVE-2022-32607

CVE-2022-32607 affects the aee component in MediaTek-derived implementations. The root cause is a use-after-free caused by a missing bounds check, enabling local escalation to System privileges without user interaction. The vulnerability is described with a local attack vector and high impact on ...

6.7CVSS6.7AI score0.00143EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2022/05/03 9:15 p.m.•18 views

CVE-2022-20104

In aee daemon, there is a possible information disclosure due to improper access control. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419017; Issue ID: ALPS06284104...

5.5CVSS6.1AI score0.00112EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/05/03 9:15 p.m.•16 views

CVE-2022-20103

In aee daemon, there is a possible information disclosure due to symbolic link following. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06383944; Issue ID: ALPS06282684...

4.4CVSS5.9AI score0.00138EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/05/03 9:15 p.m.•26 views

CVE-2022-20103

In aee daemon, there is a possible information disclosure due to symbolic link following. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06383944; Issue ID: ALPS06282684...

4.4CVSS5.9AI score0.00138EPSS
SaveExploits0References1
NVD
NVD
•added 2022/05/03 9:15 p.m.•29 views

CVE-2022-20103

In aee daemon, there is a possible information disclosure due to symbolic link following. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06383944; Issue ID: ALPS06282684...

4.4CVSS0.00138EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/05/03 9:15 p.m.•18 views

CVE-2022-20104

In aee daemon, there is a possible information disclosure due to improper access control. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419017; Issue ID: ALPS06284104...

5.5CVSS6.2AI score0.00112EPSS
SaveExploits0References1
NVD
NVD
•added 2022/05/03 9:15 p.m.•33 views

CVE-2022-20104

In aee daemon, there is a possible information disclosure due to improper access control. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419017; Issue ID: ALPS06284104...

5.5CVSS0.00112EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/05/03 9:15 p.m.•12 views

CVE-2022-20102

In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06296442; Issue ID: ALPS06296405...

4.4CVSS5.9AI score0.00111EPSS
SaveExploits0References2
NVD
NVD
•added 2022/05/03 9:15 p.m.•27 views

CVE-2022-20102

In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06296442; Issue ID: ALPS06296405...

4.4CVSS0.00111EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/05/03 9:15 p.m.•20 views

CVE-2022-20102

In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06296442; Issue ID: ALPS06296405...

4.4CVSS5.9AI score0.00111EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/05/03 9:15 p.m.•14 views

CVE-2022-20101

In aee daemon, there is a possible information disclosure due to a path traversal. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419017; Issue ID: ALPS06270870...

5.5CVSS6.1AI score0.00133EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/05/03 9:15 p.m.•20 views

CVE-2022-20101

In aee daemon, there is a possible information disclosure due to a path traversal. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419017; Issue ID: ALPS06270870...

5.5CVSS6.2AI score0.00133EPSS
SaveExploits0References1
Prion
Prion
•added 2022/05/03 9:15 p.m.•36 views

Path traversal

In aee daemon, there is a possible information disclosure due to a path traversal. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419017; Issue ID: ALPS06270870...

2.1CVSS5.1AI score0.00133EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/05/03 9:15 p.m.•34 views

Information disclosure

In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06296442; Issue ID: ALPS06296405...

2.1CVSS4.3AI score0.00111EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2022/05/03 8:15 p.m.•25 views

CVE-2022-20100

In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06383944; Issue ID: ALPS06270804...

4.4CVSS5.9AI score0.00111EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/05/03 8:15 p.m.•18 views

CVE-2022-20100

In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06383944; Issue ID: ALPS06270804...

4.4CVSS5.9AI score0.00111EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/05/03 8:15 p.m.•11 views

CVE-2022-20090

In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06209197; Issue ID: ALPS06209197...

6.4CVSS6.7AI score0.00084EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/05/03 8:15 p.m.•18 views

CVE-2022-20090

In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06209197; Issue ID: ALPS06209197...

6.4CVSS5.9AI score0.00084EPSS
SaveExploits0References1
NVD
NVD
•added 2022/05/03 8:15 p.m.•37 views

CVE-2022-20091

In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06209201; Issue ID: ALPS06226345...

6.4CVSS0.00084EPSS
SaveExploits0References1
NVD
NVD
•added 2022/05/03 8:15 p.m.•36 views

CVE-2022-20099

In aee daemon, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06296442; Issue ID: ALPS06296442...

7.8CVSS0.00114EPSS
SaveExploits0References1
Rows per page
Query Builder