PT-2024-24328 · Unknown · Com.Solarized.Firedown

Name of the Vulnerable Software and Affected Versions: com.solarized.firedown aka Solarized FireDown Browser & Downloader version 1.0.76 Description: The issue allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. This is possible because...

CVE-2024-31974: Improper Control of Generation of Code

The com.solarized.firedown aka Solarized FireDown Browser & Downloader application 1.0.76 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. com.solarized.firedown.IntentActivity uses a WebView component to display web content and doesn't adequately...

CVE-2024-20870

Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.71.8 allows local attackers to write arbitrary files with the privilege of Galaxy Store...

PT-2024-15301 · Google · Android

Name of the Vulnerable Software and Affected Versions: UserManagerService.java affected versions not specified Description: The issue is related to improper input validation in multiple methods of UserManagerService.java, which could lead to a failure to persist or enforce user restrictions. This...

CVE-2024-3480

An Implicit intent vulnerability was reported in the Motorola framework that could allow an attacker to read telephony-related data...

CVE-2024-3108

An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquire the location of the device without authorization...

CVE-2023-41828

An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider...

CVE-2023-41824

An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data...

CVE-2023-41820

An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Bluetooth audio devices...

CVE-2024-3480

The CVE-2024-3480 entry concerns the Motorola framework and an implicit-intent vulnerability that could allow an attacker to read telephony-related data. Details in the provided documents indicate: affected software/component — Motorola framework; vulnerability type — implicit intent leading to d...

CVE-2024-3480

An Implicit intent vulnerability was reported in the Motorola framework that could allow an attacker to read telephony-related data...

CVE-2024-3108

An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquire the location of the device without authorization...

CVE-2024-3108

The CVE-2024-3108 issue concerns Motorola Time Weather Widget. Several sources describe an implicit-intent vulnerability that could allow a local app to obtain the device’s location without user authorization (CVSSv3.1: Local, Low complexity, Privileges Low, Privilege Required Low; Confidentialit...

CVE-2024-3108

An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquire the location of the device without authorization...

CVE-2023-41828

The CVE-2023-41828 vulnerability affects the Motorola Phone application, describing an implicit intent export flaw that could allow unauthorized access to a non-exported content provider. The issue is scoped as Local attack, requiring user interaction, with a MEDIUM base score (CVSS 3.1: 4.4) and...

CVE-2023-41824

An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data...

CVE-2023-41824

An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data...

CVE-2023-41824

Technical details about CVE-2023-41824 are not publicly provided in the connected documents. The materials reiterate an implicit intent vulnerability in Motorola Phone Calls to read calling data but lack specifics on affected versions, root cause, or remediation. Monitor for updates.

CVE-2023-41820

CVE-2023-41820 concerns the Motorola Ready For application, where an implicit-intent vulnerability could allow a local attacker to read information about connected Bluetooth audio devices. Public descriptions across multiple sources (NVD, Red Hat, CVE listings) consistently cite this issue in the...

Motorola Ready For 安全漏洞

Motorola Ready For is a feature of Motorola USA Inc. It enhances the functionality of a cell phone by connecting it to any display or monitor1,2. A security vulnerability exists in Motorola Ready For that stems from the presence of an implicit intent vulnerability that could allow a local attacke...