Lucene search
+L

2595 matches found

Cvelist
Cvelist
•added 2024/11/07 12:00 a.m.•26 views

CVE-2024-36062

The com.callassistant.android aka AI Call Assistant & Screener application 1.174 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.callassistant.android.ui.call.incall.InCallActivity component...

0.00188EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/07 12:00 a.m.•18 views

AI Call Assistant & Screener 安全漏洞

AI Call Assistant & Screener is a call screener and blocker from Call Assistant, Inc. AI Call Assistant & Screener version 1.174 has a security vulnerability that originates from an attacker being able to make a phone call without user interaction by sending a crafted intent via the...

4CVSS6.7AI score0.00188EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/07 12:00 a.m.•8 views

CVE-2024-36062: Improper Preservation of Permissions

The com.callassistant.android aka AI Call Assistant & Screener application 1.174 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.callassistant.android.ui.call.incall.InCallActivity component...

4CVSS5.8AI score0.00188EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/07 12:00 a.m.•3 views

CVE-2024-36064: Improper Neutralization of Input During Web Page Generation

The NLL com.nll.cb aka ACR Phone application through 0.330-playStore-NoAccessibility-arm8 for Android allows any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.nll.cb.dialer.dialer.DialerActivity component...

6.2CVSS5.8AI score0.00219EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/07 12:00 a.m.•26 views

Goodwy Right Dialer 安全漏洞

Goodwy Right Dialer is a dialer software from Goodwy. A security vulnerability exists in Goodwy Right Dialer version 5.1.0 and earlier, which originates from an attacker being able to make a phone call without user interaction by sending a crafted intent to the...

7.5CVSS6.6AI score0.00316EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/06 3:15 a.m.•12 views

CVE-2024-34680

Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information...

5.5CVSS5.8AI score0.00133EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/06 3:15 a.m.•46 views

CVE-2024-34680

Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information...

5.5CVSS0.00133EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/06 2:17 a.m.•47 views

CVE-2024-34680

Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information...

4CVSS0.00133EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/06 2:17 a.m.•66 views

CVE-2024-34680

The CVE-2024-34680 issue affects Samsung Mobile’s WlanTest prior to SMR Nov-2024 Release 1, caused by the use of an implicit intent for sensitive communication. This allows a local attacker to obtain sensitive information from the device. Affected software: WlanTest (versions before SMR Nov-2024 ...

5.5CVSS4.3AI score0.00133EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/11/06 12:00 a.m.•17 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2024 Release 1 prior to version 1, which stems from WlanTest contains a sensitive...

5.5CVSS5.9AI score0.00133EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/06 12:00 a.m.•3 views

CVE-2024-34680: Undefined Security Weakness

Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information...

5.5CVSS5.7AI score0.00133EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/30 6:15 p.m.•24 views

CVE-2024-37573

The Talkatone com.talkatone.android application 8.4.6 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.talkatone.vedroid.ui.launcher.OutgoingCallInterceptor component...

8.4CVSS0.00173EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/30 12:00 a.m.•71 views

CVE-2024-37573

The Talkatone com.talkatone.android application version 8.4.6 for Android contains a security vulnerability that allows any installed application, even those with no permissions, to place phone calls without user interaction. This is caused by the ability of an attacker to send a crafted intent t...

8.4CVSS6.8AI score0.00173EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/30 12:00 a.m.•15 views

PT-2024-27668 · Talkatone · Talkatone

Name of the Vulnerable Software and Affected Versions: Talkatone com.talkatone.android application version 8.4.6 Description: The issue allows any installed application to place phone calls without user interaction by sending a crafted intent via the...

8.4CVSS6.8AI score0.00173EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/30 12:00 a.m.•1 views

CVE-2024-37573: Undefined Security Weakness

The Talkatone com.talkatone.android application 8.4.6 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.talkatone.vedroid.ui.launcher.OutgoingCallInterceptor component...

8.4CVSS5.8AI score0.00173EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/10/09 12:00 a.m.•38 views

CentOS 6 : chromium-browser (RHSA-2020:3723)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3723 advisory. - Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a...

9.3CVSS7.3AI score0.02296EPSS
SaveExploits3References14
Cvelist
Cvelist
•added 2024/10/08 6:30 a.m.•32 views

CVE-2024-34671

Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability...

3.3CVSS0.00162EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/08 6:30 a.m.•68 views

CVE-2024-34671

Summary: CVE-2024-34671 affects Samsung Internet prior to 26.0.3.1. The issue is the use of implicit intents for sensitive translation-related communication, which can allow a local attacker to obtain sensitive information. User interaction is required to trigger exploitation. Affected software: ...

5.5CVSS3.8AI score0.00162EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/08 6:30 a.m.•19 views

CVE-2024-34671

Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability...

3.3CVSS6.6AI score0.00162EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/08 6:30 a.m.•29 views

CVE-2024-34670

Use of implicit intent for sensitive communication in Sound Assistant prior to version 6.1.0.9 allows local attackers to get sensitive information...

4CVSS0.00141EPSS
SaveExploits0References1
Rows per page
Query Builder