309 matches found
CVE-2015-7946
CVE-2015-7946 describes an Information Exposure vulnerability in Unity8 used on Ubuntu Phone (and possibly elsewhere) that allows an attacker to enable the MTP service by opening the emergency dialer. The issue is confirmed as a vulnerability in Unity8’s handling of the emergency dialer and is mi...
CVE-2015-7946 MTP service exposed during emergency dialer
Information Exposure vulnerability in Unity8 as used on the Ubuntu phone and possibly also in Unity8 shipped elsewhere. This allows an attacker to enable the MTP service by opening the emergency dialer. Fixed in 8.11+16.04.20160111.1-0ubuntu1 and 8.11+15.04.20160122-0ubuntu1...
Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-30772)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. There is a security vulnerability in Samsung mobile devices, which can be exploited by attackers to obtain data from the clipboard with the help of Emergency Dialer...
CVE-2018-21046
An issue was discovered on Samsung mobile devices with O8.x software. There is clipboard Data Exposure via the Emergency Dialer upon connecting a USB device. The Samsung ID is SVE-2018-12911 November 2018...
CVE-2018-21046
An issue was discovered on Samsung mobile devices with O8.x software. There is clipboard Data Exposure via the Emergency Dialer upon connecting a USB device. The Samsung ID is SVE-2018-12911 November 2018...
Design/Logic Flaw
An issue was discovered on Samsung mobile devices with O8.x software. There is clipboard Data Exposure via the Emergency Dialer upon connecting a USB device. The Samsung ID is SVE-2018-12911 November 2018...
CVE-2018-21046
CVE-2018-21046 affects Samsung mobile devices running O(8.x) software. The issue is a clipboard data exposure via the Emergency Dialer when a USB device is connected. The connected documents do not provide a concrete root cause, exploit details, or remediation steps. No public mitigation details ...
CVE-2018-21046
An issue was discovered on Samsung mobile devices with O8.x software. There is clipboard Data Exposure via the Emergency Dialer upon connecting a USB device. The Samsung ID is SVE-2018-12911 November 2018...
Cisco IOS XE ISDN Data Leakage Vulnerability
Cisco IOS XE is a set of operating systems developed by Cisco for its network devices. A data leakage vulnerability exists in the Dialer interface feature for ISDN connections in Cisco IOS XE for Cisco 4000 Series Integrated Services Routers. The vulnerability stems from insufficient validation o...
CVE-2019-12664
A vulnerability in the Dialer interface feature for ISDN connections in Cisco IOS XE Software for Cisco 4000 Series Integrated Services Routers ISRs could allow an unauthenticated, adjacent attacker to pass IPv4 traffic through an ISDN channel prior to successful PPP authentication. The...
CVE-2019-12664
Cisco IOS XE Software on Cisco 4000 Series ISRs has a data leak vulnerability in the Dialer interface for ISDN, due to insufficient validation of IPCP state. An unauthenticated adjacent attacker can pass IPv4 traffic through an ISDN channel before PPP authentication succeeds, either by placing an...
PT-2019-3336 · Cisco · Cisco Ios Xe
Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco 4000 Series Integrated Services Routers ISRs affected versions not specified Description: A vulnerability in the Dialer interface feature for ISDN connections could allow an unauthenticated, adjacent attacker t...
CVE-2019-2125
In ChangeDefaultDialerDialog.java, there is a possible escalation of privilege due to an overlay attack. This could lead to local escalation of privilege, granting privileges to a local app without the user's informed consent, with no additional privileges needed. User interaction is needed for...
Cross site scripting
There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON-Auto-Dialer-Agents-Name" field. The vulnerability exists due to insufficient filtration of user-supplied data. A remote attacker can execute arbitrary HTML and script code in a browser in the context of the vulnerable applicati...
CVE-2018-11552
AXON PBX 2.02 contains a reflected XSS in the Name field under AXON→Auto-Dialer→Agents. The issue stems from insufficient filtering of user-supplied data, allowing a remote attacker to execute arbitrary HTML/script in the victim’s browser. Multiple connected sources (NVD/CNVD/packetstorm referenc...
CVE-2018-11552
There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON-Auto-Dialer-Agents-Name" field. The vulnerability exists due to insufficient filtration of user-supplied data. A remote attacker can execute arbitrary HTML and script code in a browser in the context of the vulnerable applicati...
AXON PBX 2.02 Cross Site Scripting
Aloha, 1. Introduction Vendor: NCH Software Affected Product: AXON PBX - 2.02 Vendor Website: http://www.nch.com.au/pbx/index.html Vulnerability Type: Reflected XSS Remote Exploitable: Yes CVE ID: CVE-2018-11552 2. Overview There is a reflected XSS vulnerability in AXON PBX Web interface. The...
Android Emergency Dialing Initiation Vulnerability
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in Android's emergency dialing activation feature. The vulnerability is caused by the system-level Intent mechanism...
Android Auto Dialer Vulnerability
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. There is a security vulnerability in Android Auto Dialer. The vulnerability arises because the system-level Intent mechanism "android.intent.action.CALL" defined in...
Dialer + - External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Dialer + published at the 'play' market has multiple vulnerabilities...