CVE-2019-15332

CVE-2019-15332 affects the Lava Z61 Android device. A pre-installed app (package name com.android.lava.powersave, versionCode 400, versionName v4.0.27) exposes an exported interface that allows any co-located app to programmatically toggle Wi-Fi without the proper access permission. This creates ...

PT-2019-14139

Name of the Vulnerable Software and Affected Versions Asus ZenFone 5Q Android device with a build fingerprint of asus/WW Phone/ASUS X017D 2:7.1.1/NGI77B/14.0400.1809.059-20181016:user/release-keys Description The issue concerns a pre-installed app with a package name of com.asus.loguploaderproxy...

CVE-2019-15403: Undefined Security Weakness

The Asus ZenFone 3s Max Android device with a build fingerprint of asus/INX00G/ASUSX00G1:7.0/NRD90M/INX00G-14.02.1807.33-20180706:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000020, versionName=7.0.0.4170901 that allows other...

CVE-2019-15400: Undefined Security Weakness

The Asus ZenFone 3 Ultra Android device with a build fingerprint of asus/WWPhone/ASUSA001:7.0/NRD90M/14.1010.1804.75-20180612:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000020, versionName=7.0.0.4170901 that allows other...

CVE-2019-15402: Undefined Security Weakness

The Asus ASUSA0022 Android device with a build fingerprint of asus/WWASUSA0022/ASUSA0022:7.0/NRD90M/14.1610.1802.18-20180321:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000020, versionName=7.0.0.4170901 that allows other...

CVE-2019-15406: Undefined Security Weakness

The Asus ASUSX00LD3 Android device with a build fingerprint of asus/WWPhone/ASUSX00LD3:7.1.1/NMF26F/14.0400.1806.203-20180720:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000020, versionName=7.0.0.4170901 that allows other...

PT-2019-14161

Name of the Vulnerable Software and Affected Versions Evercoss U6 Android device with a build fingerprint of EVERCOSS/U6/U6:7.0/NRD90M/1504236704:user/release-keys Description The issue concerns a pre-installed app with a package name of com.qiku.cleaner that allows other pre-installed apps to...

PT-2019-14179

Name of the Vulnerable Software and Affected Versions Samsung j3popeltecan Android device with a build fingerprint of samsung/j3popeltevl/j3popeltecan:8.1.0/M1AJQ/J327WVLS3BSA2:user/release-keys com.samsung.android.themecenter app version 7.0.1.0 Description The issue allows other pre-installed...

PT-2019-14130

Name of the Vulnerable Software and Affected Versions Asus ASUS A002 Android device with a build fingerprint of asus/WW ASUS A002/ASUS A002:7.0/NRD90M/14.1600.1805.51-20180626:user/release-keys Description The issue concerns a pre-installed app with a package name of com.asus.loguploaderproxy tha...

PT-2019-14191

Name of the Vulnerable Software and Affected Versions Samsung J7 Duo Android device with a build fingerprint of samsung/j7duolteub/j7duolte:8.0.0/R16NW/J720MUBS3ASB2:user/release-keys com.samsung.android.themecenter app version 7.0.0.0 Description The issue allows other pre-installed apps to...

PT-2019-14128

Name of the Vulnerable Software and Affected Versions Asus ZenFone 5Q Android device with a build fingerprint of asus/WW Phone/ASUS X017D 2:7.1.1/NGI77B/14.0400.1809.059-20181016:user/release-keys Description The issue concerns a pre-installed app with a package name of com.asus.loguploaderproxy...

PT-2019-14141

Name of the Vulnerable Software and Affected Versions Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW Z01M/ASUS Z01M 1:7.1.1/NMF26F/WW 71.50.395.57 20180913:user/release-keys Description The device contains a pre-installed app with a package name of...

PT-2019-14134

Name of the Vulnerable Software and Affected Versions Asus ASUS X00K 1 Android device with a build fingerprint of asus/CN X00K/ASUS X00K 1:7.0/NRD90M/CN X00K-14.01.1711.27-20180420:user/release-keys Description The issue concerns a pre-installed app with a package name of com.asus.loguploaderprox...

PT-2019-14171

Name of the Vulnerable Software and Affected Versions Samsung on7xelteskt Android device with a build fingerprint of samsung/on7xelteskt/on7xelteskt:8.1.0/M1AJQ/G610SKSU2CSB1:user/release-keys com.samsung.android.themecenter app version 7.0.1.0 Description The issue allows other pre-installed app...

Storefront: Issue with creating new deployment - "Unable to Create Deployment"

1. Unable to create StoreFront Deployment on a VM hosted on VMware with VMware tools installed Exception: New Server Deployment An error occurred running the command: 'Set-DSNewClusterEnvironment' An error occurred while adding the StoreFront configuration API. Exception of type...

CVE-2019-15407: Undefined Security Weakness

The Asus ASUSX0151 Android device with a build fingerprint of asus/CNX015/ASUSX0151:7.0/NRD90M/CNX015-14.00.1709.35-20171215:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000015, versionName=7.0.0.3161222 that allows other...

PT-2019-14125

Name of the Vulnerable Software and Affected Versions Asus ZenFone 3 Android device with a build fingerprint of asus/WW Phone/ASUS Z012D:7.0/NRD90M/14.2020.1708.56-20170719:user/release-keys Description The issue concerns a pre-installed app with a package name of com.asus.loguploaderproxy that...

PT-2019-14133

Name of the Vulnerable Software and Affected Versions Asus ZenFone Max 4 Android device with a build fingerprint of asus/WW Phone/ASUS X00HD 4:7.1.1/NMF26F/14.2016.1712.367-20171225:user/release-keys Description The issue concerns a pre-installed app with a package name of com.asus.loguploaderpro...

CVE-2019-18862

maidag in GNU Mailutils before 3.8 is installed setuid and allows local privilege escalation in the url mode...

CVE-2019-9854

LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice...