Lucene search
+L

1550 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/28 12:00 a.m.•5 views

CVE-2018-14985: Missing Authorization

The Leagoo Z5C Android device with a build fingerprint of sp7731c1h1032v4bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed platform app with a package name of com.android.settings versionCode=23, versionName=6.0-android.20170630.092853 that contains an exported...

7.1CVSS5.7AI score0.00347EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/28 12:00 a.m.•7 views

CVE-2018-14987: Incorrect Permission Assignment for Critical Resource

The MXQ TV Box 4.4.2 Android device with a build fingerprint of MBX/m201N/m201N:4.4.2/KOT49H/20160106:user/test-keys contains the Android framework with a package name of android versionCode=19, versionName=4.4.2-20170213 that dynamically registers a broadcast receiver app component named...

7.1CVSS5.7AI score0.00284EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/28 12:00 a.m.•4 views

CVE-2018-15005: Missing Authorization

The ZTE ZMAX Champ Android device with a build fingerprint of ZTE/Z917VL/fortune:6.0.1/MMB29M/20170327.120922:user/release-keys contains a pre-installed platform app with a package name of com.zte.zdm.sdm versionCode=31, versionName=V5.0.3 that contains an exported broadcast receiver app componen...

7.1CVSS5.7AI score0.00473EPSS
SaveExploits1References2
OSV
OSV
•added 2018/11/27 10:29 p.m.•18 views

CVE-2018-7988

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could all...

4.6CVSS5.8AI score0.00223EPSS
SaveExploits0References1
Prion
Prion
•added 2018/11/27 10:29 p.m.•26 views

Design/Logic Flaw

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could all...

3.6CVSS4.7AI score0.00223EPSS
SaveExploits0References1Affected Software2
NVD
NVD
•added 2018/11/27 10:29 p.m.•34 views

CVE-2018-7988

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could all...

4.6CVSS4.7AI score0.00223EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/11/27 10:00 p.m.•37 views

CVE-2018-7988

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could all...

4.7AI score0.00223EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/11/27 12:00 a.m.•4 views

PT-2018-18358

Name of the Vulnerable Software and Affected Versions: Smartphones affected versions not specified Description: The issue concerns a Factory Reset Protection FRP bypass. It arises due to insufficient permission verification by the system. An attacker can exploit this by connecting the smartphone ...

4.6CVSS0.00223EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/27 12:00 a.m.•6 views

CVE-2018-7988: Incorrect Authorization

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could all...

4.6CVSS5.6AI score0.00223EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/11/16 12:00 a.m.•24 views

Huawei smartphone FRP bypass vulnerability

Huawei Mate9 Pro, Nova 2 Plus are a smartphone from the Chinese company Huawei Huawei. An FRP bypass vulnerability exists on the Huawei Mate9 Pro, Nova 2 Plus smartphones. As the system fails to adequately check permissions, an attacker connects the phone to another phone via a data cable and the...

4.6CVSS4.9AI score0.00223EPSS
SaveExploits0References1
NVD
NVD
•added 2018/11/14 6:29 p.m.•29 views

CVE-2018-9543

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

5.5CVSS5.3AI score0.00203EPSS
SaveExploits0References3
OSV
OSV
•added 2018/11/14 6:29 p.m.•20 views

CVE-2018-9543

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

5.5CVSS5.9AI score0.00203EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2018/11/14 6:29 p.m.•39 views

CVE-2018-9543

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

5.5CVSS6.5AI score0.00203EPSS
SaveExploits0References2
osv-ubuntu
osv-ubuntu
•added 2018/11/14 6:29 p.m.•18 views

UBUNTU-CVE-2018-9543

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

5.5CVSS6.5AI score0.00203EPSS
SaveExploits0References3
Prion
Prion
•added 2018/11/14 6:29 p.m.•32 views

Information disclosure

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

2.1CVSS5AI score0.00203EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2018/11/14 6:00 p.m.•5 views

CVE-2018-9543

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

6.8CVSS0.00203EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2018/11/14 6:00 p.m.•43 views

CVE-2018-9543

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

5.1AI score0.00203EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/11/14 12:00 a.m.•5 views

PT-2018-19043

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue concerns a local information disclosure that can occur after a factory reset, without requiring additional execution privileges. It is noted that user interaction is not needed for...

5.5CVSS0.00203EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/14 12:00 a.m.•9 views

CVE-2018-9543: Exposure of Sensitive Information to an Unauthorized Actor

In trimdevice of f2fsformatutils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

5.5CVSS6.5AI score0.00203EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/10/25 12:00 a.m.•16 views

Multiple Huawei products FRP bypass vulnerability

Huawei ALP-AL00B and others are smartphone products of Huawei, a Chinese company. A security vulnerability exists in several Huawei products. An attacker can exploit the vulnerability to modify the phone's configuration and bypass the Restore Factory Settings protection...

4.9CVSS6.8AI score0.00237EPSS
SaveExploits0References1
Rows per page
Query Builder