Lucene search
+L

4394 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/03 12:00 a.m.•8 views

CVE-2024-43769: Incorrect Default Permissions

In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstallation of CloudDpc due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

7.8CVSS6AI score0.00081EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/03 12:00 a.m.•4 views

CVE-2024-43762: Undefined Security Weakness

In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00185EPSS
SaveExploits0References1
Mend
Mend
•added 2025/01/02 11:58 p.m.•2 views

CVE-2024-43769

In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstallation of CloudDpc due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

8.5CVSS0.00081EPSS
SaveExploits0References2
CVE
CVE
•added 2025/01/02 11:58 p.m.•539 views

CVE-2024-43769

A logic error in the isPackageDeviceAdmin function of PackageManagerService.java within Google Android creates a possible edge case that could prevent the uninstallation of CloudDpc . This vulnerability allows for local escalation of privilege without requiring additional execution privileges or ...

7.8CVSS7.1AI score0.00081EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2025/01/02 11:58 p.m.•2 views

CVE-2024-43762

In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.5CVSS0.00185EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/01/02 11:58 p.m.•13 views

CVE-2024-43762

In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.1AI score0.00185EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/01/02 11:58 p.m.•36 views

CVE-2024-43762

In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00185EPSS
SaveExploits0References2
CVE
CVE
•added 2025/01/02 11:58 p.m.•203 views

CVE-2024-43762

Google Android contains a security vulnerability where a logic error in the code allows a service to avoid unbinding from the system in multiple locations. This flaw can be exploited by local attackers to submit special requests, resulting in a local escalation of privilege without requiring addi...

7.8CVSS7.1AI score0.00185EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/02 12:00 a.m.•20 views

PT-2025-2668 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a logic error in the code that allows a service to remain bound to the system, potentially leading to a local escalation of...

7.8CVSS7.6AI score0.00185EPSS
SaveExploits0References9
OSV
OSV
•added 2025/01/01 12:00 a.m.•43 views

ASB-A-356886209

In buildreadmultirsp of gattsr.cc, there is a possible denial of service due to a logic error in the code. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.5CVSS6AI score0.00117EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•4 views

PT-2025-2848

Name of the Vulnerable Software and Affected Versions No specific software name or versions are mentioned in the provided descriptions. Description A logic error in the code of ServiceListing.java allows a malicious app to potentially hide an NLS from Settings, leading to local information...

5.5CVSS0.0008EPSS
SaveExploits0References7
OSV
OSV
•added 2025/01/01 12:00 a.m.•23 views

ASB-A-340480881

In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS6AI score0.00085EPSS
SaveExploits0References2
OSV
OSV
•added 2025/01/01 12:00 a.m.•24 views

ASB-A-308429049

In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00078EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•1 views

PT-2025-2669

Name of the Vulnerable Software and Affected Versions Bluetooth affected versions not specified Description The issue is related to a logic error in the code of build read multi rsp in gatt sr.cc, which could lead to a remote denial of service. This denial of service can be achieved remotely...

6.5CVSS0.00117EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•1 views

PT-2025-2642

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is caused by a logic error in the code, allowing for a possible way to obtain any system permission. This could lead to local escalation of...

7.8CVSS0.00085EPSS
SaveExploits0References8
OSV
OSV
•added 2025/01/01 12:00 a.m.•29 views

ASB-A-364027038

In gattsprocessreadbytypereq of gattsr.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

9.8CVSS8.6AI score0.00467EPSS
SaveExploits0References2
OSV
OSV
•added 2025/01/01 12:00 a.m.•59 views

ASB-A-316578327

In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00074EPSS
SaveExploits0References2
OSV
OSV
•added 2025/01/01 12:00 a.m.•24 views

ASB-A-365738306

In reload of ServiceListing.java , there is a possible way to allow a malicious app to hide an NLS from Settings due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6AI score0.0008EPSS
SaveExploits0References2
OSV
OSV
•added 2025/01/01 12:00 a.m.•20 views

ASB-A-369103643

In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

7.8CVSS6.1AI score0.00077EPSS
SaveExploits0References2
OSV
OSV
•added 2024/12/27 10:15 a.m.•18 views

CVE-2020-9082

There is an information disclosure vulnerability in several smartphones. The system has a logic judging error under certain scenario, the attacker should gain the permit to execute commands in ADB mode and then do a series of operation on the phone. Successful exploit could allow the attacker to...

4.6CVSS5.8AI score0.00233EPSS
SaveExploits0References1
Rows per page
Query Builder