Lucene search
+L

18 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-53862

Malicious code in bioql PyPI...

7.7CVSS6.6AI score0.00205EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/01 12:00 a.m.•46 views

ASB-A-341680936

In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.3CVSS7.9AI score0.00709EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/02/08 1:26 p.m.•22 views

CVE-2024-57960

Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

7.7CVSS6.8AI score0.00205EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/06 1:15 p.m.•38 views

CVE-2024-57960

Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

7.7CVSS0.00205EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/06 12:32 p.m.•45 views

CVE-2024-57960

Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

7.7CVSS0.00205EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/06 12:32 p.m.•76 views

CVE-2024-57960

CVE-2024-57960 is a vulnerability in Huawei HarmonyOS's ExternalStorageProvider module related to input verification . The issue is described as potentially allowing impact to service confidentiality if exploited. Public details list a CVSS score around 7.5–7.7 (HIGH) with mixed vectors (NVD: NET...

7.7CVSS7.6AI score0.00205EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
•added 2025/02/06 12:32 p.m.•13 views

CVE-2024-57960

Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

7.7CVSS6.9AI score0.00205EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/06 12:00 a.m.•4 views

PT-2025-5818

Name of the Vulnerable Software and Affected Versions: ExternalStorageProvider module affected versions not specified Description: The issue is related to an input verification vulnerability in the ExternalStorageProvider module. Successful exploitation of this vulnerability may affect service...

7.7CVSS0.00205EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/06 12:00 a.m.•5 views

CVE-2024-57960: Improper Input Validation

Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

7.7CVSS5.9AI score0.00205EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/13 5:25 p.m.•20 views

CVE-2024-43093

In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privileges needed. User...

6.9AI score0.00709EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/11/13 5:25 p.m.•63 views

CVE-2024-43093

In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privileges needed. User...

0.00709EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/13 5:25 p.m.•388 views

CVE-2024-43093

CVE-2024-43093 affects the Android Framework component ExternalStorageProvider.java, where a bypass of a file-path filter can occur due to incorrect Unicode normalization. The root issue can allow local escalation of privilege without extra execution privileges, with exploitation requiring user i...

7.3CVSS7.4AI score0.00709EPSS
SaveIn wildExploits0References3Affected Software1
NVD
NVD
•added 2021/08/17 7:15 p.m.•36 views

CVE-2021-0645

In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege, allowing an app to read private app directories in external storage, which should be restricted in Android 11, with no additional execution privileges...

7.8CVSS0.0033EPSS
SaveExploits0References1
Prion
Prion
•added 2021/08/17 7:15 p.m.•25 views

Code injection

In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege, allowing an app to read private app directories in external storage, which should be restricted in Android 11, with no additional execution privileges...

6.8CVSS7.4AI score0.0033EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/08/17 6:28 p.m.•36 views

CVE-2021-0645

In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege, allowing an app to read private app directories in external storage, which should be restricted in Android 11, with no additional execution privileges...

7.7AI score0.0033EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/08/05 12:00 a.m.•59 views

Google Android ExternalStorageProvider.java elevation of privilege vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA. an elevation-of-privilege vulnerability exists in Google Android ExternalStorageProvider.java. An attacker could exploit this vulnerability to escalate privileges...

7.8CVSS3.8AI score0.0033EPSS
SaveExploits0References1
OSV
OSV
•added 2021/08/01 12:00 a.m.•45 views

ASB-A-157320644

In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege, allowing an app to read private app directories in external storage, which should be restricted in Android 11, with no additional execution privileges...

7.8CVSS7.4AI score0.0033EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/05/03 12:00 a.m.•13 views

Google Android 安全漏洞

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA. an elevation-of-privilege vulnerability exists in Google Android ExternalStorageProvider.java. An attacker could exploit this vulnerability to escalate privileges...

7.8CVSS5.7AI score0.0033EPSS
SaveExploits0References5
Rows per page
Query Builder