UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a possible lack of privilege checking in the vowifi service...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability caused by a lack of privilege checks in visitFrees of RemoteViews.java. An attacker can exploit this vulnerability to gain elevated privileges...

UNISOC Chipsets security vulnerabilities

UNISOC Chipsets is a chipset from China's Ziguang Zhanrui UNISOC. A security vulnerability exists in some UNISOC products, which stems from a lack of privilege checking in the messaging service, leading to local information leakage. The following products are affected:...

UNISOC Chipsets security vulnerabilities

UNISOC Chipsets is a chipset from China's Ziguang Zhanrui UNISOC. A security vulnerability exists in some UNISOC products, which stems from a lack of privilege checking in the phone service, resulting in local privilege escalation. The following products are affected:...

PT-2023-23599

Name of the Vulnerable Software and Affected Versions MStore API WordPress plugin versions prior to 3.9.7 Description The issue concerns the MStore API WordPress plugin, which does not implement sufficient security measures for its AJAX actions. Specifically, it lacks privilege checks, nonce...

Google Android elevation of privilege vulnerability (CNVD-2023-60902)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a missing privilege check in getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, which can be exploited by an attacker to...

Google Android OS security vulnerabilities

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a missing privilege check in getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, which can be exploited by an attacker to gain...

Google Android OS security vulnerabilities

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a missing privilege check in getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, which can be exploited by an attacker to...

Some MediaTek chips have security vulnerabilities

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in some MediaTek chips, which stems from a local privilege escalation due to a lack of privilege checking in vow. The following products are affected: MT6580, MT6735, MT6737, MT6739,...

Google Android elevation of privilege vulnerability (CNVD-2023-41882)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a missing privilege check in the retrieveAppEntry of NotificationAccessDetails.java, which can be exploited by an attacker to elevate privileges...

CVE-2023-20909

In multiple functions of RunningTasks.java, there is a possible privilege escalation due to a missing privilege check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-...

CVE-2023-20909

In multiple functions of RunningTasks.java, there is a possible privilege escalation due to a missing privilege check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-...

CVE-2023-20909

CVE-2023-20909 describes a privilege-escalation flaw in Android’s RunningTasks.java: a missing privilege check could allow local information disclosure without requiring additional execution privileges. Affected: Android 11–13. Exploitation details, affected patches, and remediation are not speci...

CVE-2023-0405: Undefined Security Weakness

The GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training WordPress plugin before 1.4.38 does not perform any kind of nonce or privilege checks before letting logged-in users modify arbitrary posts...

PT-2023-16246

Name of the Vulnerable Software and Affected Versions The GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training WordPress plugin versions prior to 1.4.38 Description The issue concerns the lack of nonce or privilege checks, allowing logged-in users to...

UNISOC chipset security vulnerabilities

The UNISOC chipset is an integrated circuit chipset from China's Unisolar Corporation UNISOC. A security vulnerability exists in the UNISOC chipset, which stems from a lack of privilege checking in the Contacts service, which could lead to a local denial of service in the Contacts service without...

UNISOC chipset security vulnerabilities

The UNISOC chipset is an integrated circuit chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC chipset that stems from a lack of privilege checking in the power management service, which could result in setting up the power management service without additiona...

UNISOC chipset security vulnerabilities

The UNISOC chipset is an integrated circuit chipset from China's Unisolar Corporation UNISOC. The UNISOC chipset suffers from a security vulnerability that stems from a lack of privilege checking in its UscAIEngine service that allows an attacker to set up the UscAIEngine service without addition...

Jenkins DotCi Plugin security vulnerabilities

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

MediaTek chip security vulnerabilities

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. The MediaTek chips have a security vulnerability that stems from a lack of privilege checking, with a possible way to write a record of an application's privilege usage. This could lead to local privilege...