PT-2023-15639 · Unknown · Audio Service

Name of the Vulnerable Software and Affected Versions: Audio service affected versions not specified Description: The issue is related to a possible missing permission check in the audio service, which could lead to local escalation of privilege with no additional execution privileges...

PT-2023-15637 · Unknown · Telephony Service

Name of the Vulnerable Software and Affected Versions: Telephony service affected versions not specified Description: The issue is related to a possible missing permission check in the telephony service, which could lead to a local denial of service with no additional execution privileges...

PT-2023-15642 · Unknown · Audio Service

Name of the Vulnerable Software and Affected Versions: Audio service affected versions not specified Description: The issue is related to a possible missing permission check in the audio service, which could lead to local escalation of privilege with no additional execution privileges...

PT-2023-15744 · Unknown · Audio Service

Name of the Vulnerable Software and Affected Versions: Audio service affected versions not specified Description: The issue is related to a possible missing permission check in the audio service. This could lead to local escalation of privilege with no additional execution privileges...

PT-2023-15626 · Unknown · Soter Service

Name of the Vulnerable Software and Affected Versions: Soter service affected versions not specified Description: The issue is related to a possible missing permission check in the soter service. This could lead to a local denial of service with no additional execution privileges. Recommendations...

PT-2023-15640 · Unknown · Audio Service

Name of the Vulnerable Software and Affected Versions: Audio service affected versions not specified Description: The issue is related to a possible missing permission check in the audio service. This could lead to local escalation of privilege with no additional execution privileges...

PT-2023-15755 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible missing permission check in the dialer service. This could lead to a local denial of service with no additional...

PT-2023-15752 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible missing permission check in the dialer service. This could lead to a local denial of service with no additional...

PT-2023-15638 · Unknown · Telephony Service

Name of the Vulnerable Software and Affected Versions: Telephony service affected versions not specified Description: The issue is related to a possible missing permission check in the telephony service. This could lead to local information disclosure with no additional execution privileges...

PT-2023-15647 · Unknown · Audio Service

Name of the Vulnerable Software and Affected Versions: Audio service affected versions not specified Description: The issue is related to a possible missing permission check in the audio service. This could lead to local escalation of privilege with no additional execution privileges...

PT-2023-15746

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a possible missing permission check in the dialer service. This could lead to local information disclosure with no additional...

ASB-A-259938771

In applySyncTransaction of WindowOrganizer.java, a missing permission check could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-259385017

In retrieveAppEntry of NotificationAccessDetails.java, there is a missing permission check. This could lead to local escalation of privilege across user boundaries with no additional execution privileges needed. User interaction is not needed for exploitation...

GHSA-JH3W-6JP2-VQQM Missing permission check of canView in GridFieldPrintButton

The GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorised to access. Upgrade to silverstripe/framework 4.12.5 or above to address the issue. Reported by Stephan Bauer from relaxt...

Missing permission check of canView in GridFieldPrintButton

The GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorised to access. Upgrade to silverstripe/framework 4.12.5 or above to address the issue. Reported by Stephan Bauer from relaxt...

CVE-2023-22728 Silverstripe Framework has missing permission check of canView in GridFieldPrintButton

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, the GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorise...

CVE-2023-22728 - Missing permission check in GridFieldPrintButton

More info at https://www.silverstripe.org/download/security-releases/cve-2023-22728...

CVE-2023-21091

In canDisplayLocalUi of AppLocalePickerActivity.java, there is a possible way to change system app locales due to a missing permission check. This could lead to local denial of service across user boundaries with no additional execution privileges needed. User interaction is not needed for...

Design/Logic Flaw

In canDisplayLocalUi of AppLocalePickerActivity.java, there is a possible way to change system app locales due to a missing permission check. This could lead to local denial of service across user boundaries with no additional execution privileges needed. User interaction is not needed for...

Design/Logic Flaw

In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the display content due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...