Lucene search
+L

5396 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/17 12:00 a.m.•6 views

CVE-2020-0288: Missing Authorization

In PackageManager, there is a missing permission check. This could lead to local information disclosure across user boundaries with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153995991...

5.5CVSS5.8AI score0.00135EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/09/17 12:00 a.m.•2 views

PT-2020-11725

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing permission check in ActivityManager, which could allow access to protected data. This might lead to local information disclosure without requiring additional execution...

5.5CVSS0.00132EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/09/17 12:00 a.m.•3 views

PT-2020-11696

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing permission check in the NetworkStatsService, which could allow access to protected data. This might lead to local information disclosure without requiring additional...

5.5CVSS0.00139EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/09/17 12:00 a.m.•1 views

PT-2020-11647

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue concerns a missing permission check in Java network APIs, potentially allowing access to sensitive network state. This could lead to local information disclosure without requiring additional...

5.5CVSS0.00219EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2020/09/17 12:00 a.m.•2 views

PT-2020-11644

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description A missing permission check in PackageManager could lead to local information disclosure across users. No additional execution privileges are needed, and user interaction is not required for exploitation...

5.5CVSS0.00132EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/09/17 12:00 a.m.•3 views

PT-2020-11667

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to missing permission checks in the AudioService, which could lead to local information disclosure of audio configuration. No additional execution privileges are needed for...

5.5CVSS0.00139EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/09/17 12:00 a.m.•3 views

PT-2020-11620

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.8CVSS0.00163EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/17 12:00 a.m.•5 views

CVE-2020-0343: Missing Authorization

In NetworkStatsService, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

5.5CVSS5.8AI score0.00139EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/17 12:00 a.m.•4 views

CVE-2020-0372: Missing Authorization

In ActivityManager, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

5.5CVSS5.8AI score0.00132EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/17 12:00 a.m.•4 views

CVE-2020-0289: Missing Authorization

In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153996872...

5.5CVSS5.8AI score0.00135EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/17 12:00 a.m.•6 views

CVE-2020-0290: Missing Authorization

In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153996866...

5.5CVSS5.8AI score0.00132EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/17 12:00 a.m.•6 views

CVE-2020-0314: Missing Authorization

In AudioService, there are missing permission checks. This could lead to local information disclosure of audio configuration with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154934920...

5.5CVSS5.8AI score0.00139EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/09/17 12:00 a.m.•1 views

PT-2020-11643

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS0.00135EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/17 12:00 a.m.•4 views

CVE-2020-0317: Missing Authorization

In UsageStatsManager, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

5.5CVSS5.8AI score0.00132EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/17 12:00 a.m.•6 views

CVE-2020-0293: Missing Authorization

In Java network APIs, there is possible access to sensitive network state due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation in Android versions: Android-11, Android ID:...

5.5CVSS5.8AI score0.00219EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/09/17 12:00 a.m.•3 views

PT-2020-11670

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue concerns a missing permission check in the UsageStatsManager, potentially allowing access to protected data. This could lead to local information disclosure without requiring additional executi...

5.5CVSS0.00132EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/17 12:00 a.m.•7 views

CVE-2020-0266: Missing Authorization

In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-1110864...

7.8CVSS5.8AI score0.00163EPSS
SaveExploits0References2
NVD
NVD
•added 2020/09/16 2:15 p.m.•30 views

CVE-2020-2272

A missing permission check in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

4.3CVSS0.00656EPSS
SaveExploits0References2
NVD
NVD
•added 2020/09/16 2:15 p.m.•42 views

CVE-2020-2255

A missing permission check in Jenkins Blue Ocean Plugin 1.23.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

4.3CVSS0.00865EPSS
SaveExploits0References2
NVD
NVD
•added 2020/09/16 2:15 p.m.•27 views

CVE-2020-2260

A missing permission check in Jenkins Perfecto Plugin 1.17 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified credentials...

4.3CVSS0.00656EPSS
SaveExploits0References2
Rows per page
Query Builder