2042 matches found
CVE-2024-53935
The com.callos14.callscreen.colorphone aka iCall OS17 - Color Phone Flash application through 4.3 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.callos14.callscreen.colorphone.DialerActivity component...
CVE-2024-53933
The com.callerscreen.colorphone.themes.callflash aka Color Call Theme & Call Screen application through 1.0.7 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...
CVE-2024-53934
The com.windymob.callscreen.ringtone.callcolor.colorphone aka Color Phone Call Screen Themes application through 1.1.2 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.frovis.androidbase.call.DialerActivi...
CVE-2024-53934
The CVE-2024-53934 issue affects the Color Phone Call Screen Themes app (com.windymob.callscreen.ringtone.callcolor.colorphone) up to version 1.1.2 for Android. A crafted intent to the DialerActivity component (com.frovis.androidbase.call.DialerActivity) enables any other app, with no permissions...
BG.Studio Color Phone Call Screen App 安全漏洞
BG.Studio Color Phone Call Screen App BG.Studio com.asianmobile.callcolor is a color phone call screen application from BG.Studio, Inc. A security vulnerability exists in BG.Studio Color Phone Call Screen App version 1.1.2 and earlier, which stems from a vulnerability that allows any application ...
CVE-2024-53936
The CVE-2024-53936 issue affects the Android app com.asianmobile.callcolor (Color Phone Call Screen App) up to version 24. The vulnerability arises from the CallActivity component, which can be invoked via a crafted intent by any application with no permissions, enabling unauthorized phone calls ...
CVE-2024-53931
The com.glitter.caller.screen aka iCaller, Caller Theme & Dialer application through 1.1 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.glitter.caller.screen.DialerActivity component...
BG.Studio Color Phone Call Screen App 安全漏洞
BG.Studio Color Phone Call Screen App BG.Studio com.asianmobile.callcolor is a color phone call screen application from BG.Studio, Inc. A security vulnerability exists in BG.Studio Color Phone Call Screen App version 21.1.9 and earlier, which stems from a vulnerability that allows any application...
PT-2025-3002 · Unknown · Com.Callos14.Callscreen.Colorphone
Name of the Vulnerable Software and Affected Versions: com.callos14.callscreen.colorphone also known as iCall OS17 - Color Phone Flash versions 4.3 and earlier Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via the...
Galaxy studio apps iCall OS17 Color Phone Flash 安全漏洞
Galaxy studio apps iCall OS17 Color Phone Flash is a default dialer application from Galaxy studio apps, Inc. A security vulnerability exists in Galaxy studio apps iCall OS17 Color Phone Flash version 4.3 and earlier, which originates from a crafted intent that can be sent via the...
PT-2024-27669 · Unknown · Com.Grice.Call
Name of the Vulnerable Software and Affected Versions: com.grice.call application version 4.5.2 Description: The issue allows any installed application, even those without permissions, to place phone calls without user interaction by sending a crafted intent via the...
GriceMobile com.grice.call 安全漏洞
GriceMobile com.grice.call is an application from GriceMobile, Inc. A security vulnerability exists in GriceMobile com.grice.call version 4.5.2, which originates from allowing any installed application to send a crafted intent to make a phone call without user interaction via...
CVE-2024-37575
The CVE-2024-37575 entry concerns the Mister org.mistergroup.shouldianswer Android app (version 1.4.264). The issue arises from allowing any installed application, with no permissions, to initiate a phone call by sending a crafted intent to the DefaultDialerActivity component (org.mistergroup.sho...
Mister org.mistergroup.shouldianswer 安全漏洞
Mister org.mistergroup.shouldianswer is an application from Mister, Inc. A security vulnerability exists in Mister org.mistergroup.shouldianswer version 1.4.264, which originates from allowing any installed application to be used via the org.mistergroup.shouldianswer.ui.defaultdialer...
Mozilla Firefox Clickjacking Vulnerability (CNVD-2024-48569)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox is vulnerable to clickjacking. An attacker can exploit this vulnerability to confirm user intent via eavesdropping hijacking...
CVE-2024-49417
Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...
CVE-2024-49416
Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information...
CVE-2024-49417
Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...
CVE-2024-49417
CVE-2024-49417 affects Samsung Smart Touch Call prior to 1.0.0.8. The issue is caused by the use of an implicit intent for sensitive communications, which can allow a local attacker to launch privileged activities. User interaction is required to trigger the vulnerability. Documents consistently ...