CVE-2023-40113

In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40105

In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Design/Logic Flaw

In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40113

CVE-2023-40113 affects the Android platform (System component) and stems from a missing permission check that allowed apps to access cross‑user message data. This enables local information disclosure without extra privileges or user interaction. Public details in the provided documents are limite...

CVE-2023-40105

In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-12851 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a missing permission check in multiple locations, allowing apps to access cross-user message data. This could lead to local informati...

ASB-A-309426390

In injectInputEventToInputFilter of AccessibilityManagerService.java, there is a possible arbitrary input event injection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2023-48339

In jpg driver, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed...

CVE-2023-48339

In jpg driver, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed...

CVE-2023-48339

CVE-2023-48339 affects the jpg driver and is caused by a missing permission check in the driver, potentially enabling local information disclosure with System execution privileges required. The CVSSv3.1 vector indicates Local access, High privileges, Confidentiality impact High, and no documented...

PT-2024-13584 · Unknown · Jpg Driver

Name of the Vulnerable Software and Affected Versions: jpg driver affected versions not specified Description: The issue is related to a possible missing permission check in the jpg driver. This could lead to local information disclosure, with System execution privileges needed. Recommendations: ...

PT-2024-14890 · Qualys · Qualys Jenkins Plugin For Was

Name of the Vulnerable Software and Affected Versions: Qualys Jenkins Plugin for WAS versions prior to and including 2.0.11 Description: The issue is related to a missing permission check while performing a connectivity check to Qualys Cloud Services. This flaw allows any user with login access t...

Information disclosure

There is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of health data with no additional execution privileges needed...

CVE-2023-4164 There is a possible information disclosure due to a missing permission check in Pixel Watch

There is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of health data with no additional execution privileges needed...

CVE-2023-4164 There is a possible information disclosure due to a missing permission check in Pixel Watch

There is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of health data with no additional execution privileges needed...

CVE-2023-4164

CVE-2023-4164 affects Google Pixel Watch. It describes a local information-disclosure vulnerability caused by a missing permission check that could expose health data without extra privileges. Public details confirm the issue but do not provide exploit specifics. Impact is focused on confidential...

Missing Permission Check

org.jenkins-ci.plugins:scriptler is vulnerable to a Missing Permission Check. The vulnerability is due to a missing permission check in a HTTP end point which allows attackers with Overall/Read permission to read the contents of a Groovy script by knowing its ID...

CVE-2023-50779

Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified token...

Design/Logic Flaw

Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CVE-2023-50779

Summary of CVE-2023-50779 : Jenkins PaaSLane Estimate Plugin, versions 1.0.4 and earlier, has missing permission checks in multiple HTTP endpoints. This flaw allows attackers with Overall/Read permission to connect to an attacker‑specified URL using an attacker‑specified token. The NVD entry docu...