Lucene search
+L

2042 matches found

OSV
OSV
added 2025/04/08 5:15 a.m.16 views

CVE-2025-20951

Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.90.7 allows local attackers to write arbitrary files with the privilege of Galaxy Store...

5.5CVSS5.9AI score0.00135EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/08 5:15 a.m.10 views

CVE-2025-20942

Improper Verification of Intent by Broadcast Receiver in DeviceIdService prior to SMR Apr-2025 Release 1 allows local attackers to reset OAID...

4.4CVSS5.8AI score0.0013EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/08 4:40 a.m.25 views

CVE-2025-20950

Use of implicit intent for sensitive communication in SamsungNotes prior to version 4.4.26.45 allows local attackers to access sensitive information...

4CVSS0.00139EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/04/03 5:47 p.m.21 views

Chromium: CVE-2025-3068 Inappropriate implementation in Intents

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS6.9AI score0.00321EPSS
SaveExploits0
OSV
OSV
added 2025/04/01 12:0 a.m.24 views

ASB-A-333344157

In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.3AI score0.00075EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/01 12:0 a.m.24 views

ASB-A-376674080

In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.8CVSS7.3AI score0.00091EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/03/29 6:32 a.m.18 views

CVE-2024-45353

An intent redriction vulnerability exists in the Xiaomi quick App framework application product. The vulnerability is caused by improper input validation and can be exploited by attackers tointent redriction...

4.3CVSS7.2AI score0.00149EPSS
SaveExploits0References3
NVD
NVD
added 2025/03/27 7:15 a.m.14 views

CVE-2024-45353

An intent redriction vulnerability exists in the Xiaomi quick App framework application product. The vulnerability is caused by improper input validation and can be exploited by attackers tointent redriction...

4.3CVSS0.00149EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/27 6:12 a.m.6 views

CVE-2024-45353 quick App has intent redriction vulnerability

An intent redriction vulnerability exists in the Xiaomi quick App framework application product. The vulnerability is caused by improper input validation and can be exploited by attackers tointent redriction...

4.3CVSS4.7AI score0.00149EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/27 6:12 a.m.19 views

CVE-2024-45353 quick App has intent redriction vulnerability

An intent redriction vulnerability exists in the Xiaomi quick App framework application product. The vulnerability is caused by improper input validation and can be exploited by attackers tointent redriction...

4.3CVSS0.00149EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/27 6:12 a.m.75 views

CVE-2024-45353

CVE-2024-45353 concerns Xiaomi Quick App Framework with an intent redirection vulnerability caused by improper input validation. Affected product is Xiaomi Quick App Framework (application product). The available connected documents provide: (1) vulnerability type: intent redirection due to input...

4.3CVSS4.8AI score0.00149EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.5 views

Xiaomi Quick App Framework 访问控制错误漏洞

Xiaomi Quick App Framework is an IP camera device from China's Xiaomi, a lightweight application development framework that allows developers to quickly create and publish quick apps that can be used without downloading and installing them. A security vulnerability exists in Xiaomi Quick App...

4.3CVSS6.7AI score0.00149EPSS
SaveExploits0References2
NVD
NVD
added 2025/03/06 5:15 a.m.8 views

CVE-2025-20909

Use of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1 allows local attackers to access sensitive information...

5.5CVSS0.00135EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/06 5:4 a.m.5 views

CVE-2025-20909

Use of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1 allows local attackers to access sensitive information...

4CVSS6.8AI score0.00135EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/06 5:4 a.m.53 views

CVE-2025-20909

CVE-2025-20909 affects Samsung Settings (Settings service) prior to SMR Mar-2025 Release 1, where use of implicit intents for sensitive communication enables local attackers to access sensitive information. Root cause is implicit handling of sensitive data via intents within Settings, leading to ...

5.5CVSS6.8AI score0.00135EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2025/02/17 12:0 a.m.5 views

Google Android elevation of privilege vulnerability (CNVD-2025-14977)

Google Android is a free and open source mobile operating system developed by Google Inc. based on the Linux kernel. Google Android suffers from an elevation of privilege vulnerability that stems from an obfuscated sub-sub-sub-sub-sub-sub-sub issue in the checkKeyIntent function of...

7.7CVSS6.4AI score0.00168EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 12:39 a.m.8 views

CVE-2022-30756

Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of Finder...

8.5CVSS6.8AI score0.00134EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 12:34 a.m.12 views

CVE-2022-30754

Implicit Intent hijacking vulnerability in AppLinker prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of AppLinker...

8.5CVSS6.8AI score0.00134EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:53 p.m.8 views

CVE-2024-26131

Element Android is an Android Matrix Client. Element Android version 1.4.3 through 1.6.10 is vulnerable to intent redirection, allowing a third-party malicious application to start any internal activity by passing some extra parameters. Possible impact includes making Element Android display an...

8.4CVSS6.9AI score0.00473EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/04 8:15 a.m.5 views

CVE-2025-20896

Use of implicit intent for sensitive communication in EasySetup prior to version 11.1.18 allows local attackers to access sensitive information...

5.5CVSS5.8AI score0.00131EPSS
SaveExploits0References1
Rows per page
Query Builder