Lucene search
+L

1130 matches found

OSV
OSV
•added 2021/08/03 8:15 p.m.•8 views

DEBIAN-CVE-2021-30580

Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious application to obtain potentially sensitive information via a crafted HTML page...

6.5CVSS6.4AI score0.01341EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/08/03 8:15 p.m.•16 views

CVE-2021-30580

Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious application to obtain potentially sensitive information via a crafted HTML page...

6.5CVSS6.4AI score0.01341EPSS
SaveExploits0References9
NVD
NVD
•added 2021/08/03 2:15 p.m.•43 views

CVE-2021-22400

Some Huawei Smartphones has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The app can modify specific parameters, causing the system to crash. Affected product include:OxfordS-AN00A...

5.5CVSS0.00396EPSS
SaveExploits0References1
OSV
OSV
•added 2021/08/03 2:15 p.m.•19 views

CVE-2021-22400

Some Huawei Smartphones has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The app can modify specific parameters, causing the system to crash. Affected product include:OxfordS-AN00A...

5.5CVSS5.8AI score0.00396EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/08/03 2:15 p.m.•12 views

CVE-2021-22400

Some Huawei Smartphones has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The app can modify specific parameters, causing the system to crash. Affected product include:OxfordS-AN00A...

5.5CVSS5.9AI score0.00396EPSS
SaveExploits0References2
Prion
Prion
•added 2021/08/03 2:15 p.m.•31 views

Input validation

Some Huawei Smartphones has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The app can modify specific parameters, causing the system to crash. Affected product include:OxfordS-AN00A...

4.3CVSS5.4AI score0.00396EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/08/03 1:18 p.m.•72 views

CVE-2021-22400

CVE-2021-22400 affects Huawei OxfordS-AN00A smartphones (listed firmware versions such as 10.0.1.10, 10.0.1.105, 10.0.1.115, 10.0.1.123, 10.0.1.135, 10.0.1.152, 10.0.1.160, 10.0.1.167, 10.0.1.173, 10.0.1.178, 10.1.0.202). The root cause is insufficient input/parameter validation (missing paramete...

5.5CVSS5.4AI score0.00396EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/08/03 1:18 p.m.•46 views

CVE-2021-22400

Some Huawei Smartphones has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The app can modify specific parameters, causing the system to crash. Affected product include:OxfordS-AN00A...

5.7AI score0.00396EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/08/03 12:00 a.m.•1 views

PT-2021-15024

Name of the Vulnerable Software and Affected Versions: Huawei Smartphones versions 10.0.1.10 through 10.1.0.202 Description: The issue is due to insufficient input validation, allowing an attacker to trick a user into installing a malicious app that can modify specific parameters and cause the...

5.5CVSS0.00396EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/03 12:00 a.m.•6 views

CVE-2021-22400: Improper Input Validation

Some Huawei Smartphones has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The app can modify specific parameters, causing the system to crash. Affected product include:OxfordS-AN00A...

5.5CVSS5.8AI score0.00396EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/07/27 12:00 a.m.•81 views

Huawei OxfordS-AN00A Input Validation Error Vulnerability

Huawei OxfordS-AN00A is a smartphone from Huawei China.The Huawei OxfordS-AN00A is vulnerable to an input validation error, which stems from a missing parameter checksum. An attacker could trick users into installing a malicious app, which could modify specific parameters and cause the system to...

5.5CVSS3.2AI score0.00396EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/07/22 12:00 a.m.•25 views

Huawei OxfordS-AN00A 输入验证错误漏洞

Huawei OxfordS-AN00A is a smartphone from Huawei China.The Huawei OxfordS-AN00A is vulnerable to an input validation error, which stems from a missing parameter checksum. An attacker could trick users into installing a malicious app, which could modify specific parameters and cause the system to...

5.5CVSS5.6AI score0.00396EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/07/07 12:00 a.m.•21 views

Huawei P30 输入验证错误漏洞

Huawei P30 is a smartphone from Chinese company Huawei Huawei. An input validation error vulnerability exists in the Huawei P30, which stems from a vulnerability in the product's Bluetooth module's handling of broadcast data, and can be exploited by an attacker to install the app to send a specif...

5.5CVSS5.6AI score0.00166EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/06/17 10:15 p.m.•11 views

CVE-2021-32694

Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.15.1, a malicious application on the same device is possible to crash the Nextcloud Android Client due to an uncaught exception. The vulnerability is patched in version 3.15.1...

5.5CVSS6.2AI score0.00967EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2021/06/17 9:15 p.m.•41 views

CVE-2021-32695

Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.16.1, a malicious app on the same device could have gotten access to the shared preferences of the Nextcloud Android application. This required user-interaction as a victim had to initiate the sharing flow and choos...

4.3CVSS0.00881EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/06/17 8:50 p.m.•47 views

CVE-2021-32695 Malicious Android app could access Shared Preferences of the Nextcloud Android client

Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.16.1, a malicious app on the same device could have gotten access to the shared preferences of the Nextcloud Android application. This required user-interaction as a victim had to initiate the sharing flow and choos...

3.9CVSS4.5AI score0.00881EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/06/17 12:00 a.m.•16 views

PT-2021-19861

Name of the Vulnerable Software and Affected Versions Nextcloud Android app versions prior to 3.15.1 Description The issue allows a malicious application on the same device to crash the Nextcloud Android Client due to an uncaught exception. Recommendations For versions prior to 3.15.1, update to...

5.5CVSS6.2AI score0.00967EPSS
SaveExploits1References7
OSV
OSV
•added 2021/06/04 6:15 p.m.•15 views

CVE-2021-30519

Use after free in Payments in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious payments app to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2021/06/04 6:15 p.m.•38 views

CVE-2021-30519

Use after free in Payments in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious payments app to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.00916EPSS
SaveExploits1References1
OSV
OSV
•added 2021/06/04 6:15 p.m.•6 views

UBUNTU-CVE-2021-30519

Use after free in Payments in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious payments app to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.00916EPSS
SaveExploits1References2
Rows per page
Query Builder