CVE-2020-1905

CVE-2020-1905 concerns WhatsApp for Android prior to v2.20.185. It describes that Media ContentProvider URIs used to open attachments were generated sequentially, enabling a malicious app chosen to open a file to guess the URI of a previously opened attachment until the opener app is terminated. ...

CVE-2020-1905

Media ContentProvider URIs used for opening attachments in other apps were generated sequentially prior to WhatsApp for Android v2.20.185, which could have allowed a malicious third party app chosen to open the file to guess the URIs for previously opened attachments until the opener app is...

PT-2020-15159

Name of the Vulnerable Software and Affected Versions WhatsApp for Android versions prior to 2.20.185 Description A issue exists where Media ContentProvider URIs used for opening attachments in other apps were generated sequentially, which could have allowed a malicious third party app to guess t...

CVE-2020-1905: Generation of Predictable Numbers or Identifiers

Media ContentProvider URIs used for opening attachments in other apps were generated sequentially prior to WhatsApp for Android v2.20.185, which could have allowed a malicious third party app chosen to open the file to guess the URIs for previously opened attachments until the opener app is...

CVE-2019-14339

The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive information including factory passwords for the...

Default credentials

The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive information including factory passwords for the...

PT-2019-13621

Name of the Vulnerable Software and Affected Versions jp.co.canon.bsd.ad.pixmaprint version 2.5.5 Description The issue concerns the ContentProvider in the Canon PRINT application, which fails to properly restrict access to canon.ij.printer.capability.data. This allows a malicious application to...

CVE-2019-14339: Undefined Security Weakness

The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive information including factory passwords for the...

Canon PRINT 2.5.5 URI Injection

Exploit Title: Content Provider URI Injection on Canon PRINT 2.5.5 CVE-2019-14339 Date: 24th July, 2019 Exploit Author: 0x48piraj Vendor Homepage: https://www.usa.canon.com/internet/portal/us/home/explore/printing-innovations/mobile-printing/canon-print-app Software Link:...

Exploit for CVE-2019-14339

CVE-2019-14339 Content Provider URI Injection on Canon PRINT...

PT-2019-9814

Name of the Vulnerable Software and Affected Versions Foxit Reader SDK ActiveX Professional version 5.4.0.1031 Description The issue arises from an uninitialized object in the IReader ContentProvider::GetDocEventHandler function when the control is embedded into Office documents. This can be...

CVE-2018-19452

A use after free in the TextBox field Mouse Enter action in IReaderContentProvider can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19444, this has a different free...

PT-2019-9810

Name of the Vulnerable Software and Affected Versions Foxit Reader SDK ActiveX Professional version 5.4.0.1031 Description A use after free issue in the TextBox field Validate action in IReader ContentProvider can be triggered by specially crafted PDF files, potentially allowing an attacker to...

PT-2019-9819

Name of the Vulnerable Software and Affected Versions Foxit Reader SDK ActiveX Professional version 5.4.0.1031 Description A use after free issue in the TextBox field Mouse Enter action in IReader ContentProvider can be triggered by specially crafted PDF files, potentially allowing an attacker to...

The vulnerability of the ContentProvider.java functions in the Android operating system allows attackers to disclose protected information.

The vulnerability of several functions in the ContentProvider.java file of the Android operating system is related to a path traversal error. Exploiting this vulnerability can allow an attacker to disclose protected information...

Google Android Information Disclosure Vulnerability (CNVD-2018-26776)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in several functions of the ContentProvider.java file in Android, which stems from the program's failure to verify URIs and can be...

CVE-2018-9548

In multiple functions of ContentProvider.java, there is a possible permission bypass due to a missing URI validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...

Design/Logic Flaw

In multiple functions of ContentProvider.java, there is a possible permission bypass due to a missing URI validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...

CVE-2018-9548

In multiple functions of ContentProvider.java, there is a possible permission bypass due to a missing URI validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...

CVE-2018-9548

CVE-2018-9548 affects Android: multiple ContentProvider.java functions allow a permission bypass due to missing URI validation, enabling local information disclosure without user interaction. Vulnerable in Android 7.0–7.1.2, 8.0–8.1, and 9.0. Mitigation is to apply patches from the 2018-12-01/12-...