com.evenwell.fqc 安全漏洞

com.evenwell.fqc is a component. A security vulnerability exists in com.evenwell.fqc, which arises from the fact that certain software versions of the device contain a vulnerable pre-installed application com.evenwell.fqc that allows a native third-party application to execute arbitrary shell...

TCL 安全漏洞

Tcl is a freely available open source package. It provides a powerful platform for creating integrated applications that tie together various applications, protocols, devices and frameworks. A security vulnerability exists in the TCL 30Z, A3X, 20XE, and 10L, which stems from the fact that certain...

TCL 20XE 安全漏洞

TCL 20XE is a cell phone from TCL. A security vulnerability exists in the Boost Mobile TCL 20XE that originates from the fact that certain software versions of the device contain vulnerable pre-installed applications com.tct.gcs.hiddenmenuproxy that allow a local third-party application to...

CVE-2023-38290

Certain software builds for the BLU View 2 and Sharp Rouvo V Android devices contain a vulnerable pre-installed app with a package name of com.evenwell.fqc versionCode='9020801', versionName='9.0208.01' ; versionCode='9020913', versionName='9.0209.13' ; versionCode='9021203',...

CVE-2023-38295

Certain software builds for the TCL 30Z and TCL 10 Android devices contain a vulnerable, pre-installed app that relies on a missing permission that provides no protection at runtime. The missing permission is required as an access permission by components in various pre-installed apps. On the TCL...

CVE-2023-38294

Certain software builds for the Itel Vision 3 Turbo Android device contain a vulnerable pre-installed app with a package name of com.transsion.autotest.factory versionCode='7', versionName='1.8.02203101027' that allows local third-party apps to execute arbitrary shell commands in its context syst...

CVE-2023-38295

Certain software builds for the TCL 30Z and TCL 10 Android devices contain a vulnerable, pre-installed app that relies on a missing permission that provides no protection at runtime. The missing permission is required as an access permission by components in various pre-installed apps. On the TCL...

CVE-2023-38290

Certain software builds for the BLU View 2 and Sharp Rouvo V Android devices contain a vulnerable pre-installed app with a package name of com.evenwell.fqc versionCode='9020801', versionName='9.0208.01' ; versionCode='9020913', versionName='9.0209.13' ; versionCode='9021203',...

CVE-2023-38295

Certain software builds for TCL 30Z and TCL 10 Android devices contain vulnerable pre-installed apps (com.tcl.screenrecorder and com.tcl.sos ) that lack runtime protection for a missing permission: com.tct.smart.switchphone.permission.SWITCH_DATA. An attacker can exploit this by using a third-par...

Tcl 安全漏洞

Tcl is a freely available open source package. It provides a powerful platform for creating integrated applications that tie together various applications, protocols, devices and frameworks. A security vulnerability exists in TCL 30Z , TCL 10 that stems from the fact that certain software version...

CVE-2023-38293

Certain software builds for Nokia C200 and Nokia C100 Android devices are vulnerable due to a pre-installed app (com.tracfone.tfstatus , versionCode '31', versionName '12'). The vulnerability allows local third-party apps to execute arbitrary AT commands in the app's context (radio user) via AT c...

CVE-2023-38290

The BLU View 2 and Sharp Rouvo V Android devices are vulnerable due to a flaw in a pre-installed app (com.evenwell.fqc ; versions 9.0208.01, 9.0209.13, and 9.0212.03). Inadequate access control allows local third-party apps to execute arbitrary shell commands with system privileges. The attack ve...

FFmpeg Installed (Linux / Unix)

Binary data ffmpegnixinstalled.nbin...

CVE-2024-21072

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Data Provider UI. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base...

CVE-2024-21072

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Data Provider UI. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base...

Oracle E-Business Suite 的 Oracle Installed Base 安全漏洞

Oracle E-Business Suite and Oracle Installed Base are both products of Oracle Corporation.Oracle E-Business Suite is a fully integrated suite of global business management software. The software provides customer relationship management, service management, financial management and other...

CVE-2024-21072: Undefined Security Weakness

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Data Provider UI. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base...

PT-2024-4889 · Oracle · Oracle E-Business Suite +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the Data Provider UI component of Oracle Installed Base, allowing an unauthenticated attacker with network access vi...

Shortcodes and extra features for Phlox theme <= 2.15.5 - Contributor+ XSS via HTML Element

Description The plugin is vulnerable to Stored Cross-Site Scripting via the HTML Element due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages that will execute...

The vulnerability of the Azure AI Search search engine, related to the use of pre-installed credentials, allows a perpetrator to disclose protected information.

The vulnerability of the Azure AI Search search engine is related to the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by security measures...