Lucene search
+L

591 matches found

Prion
Prion
added 2020/12/15 4:15 p.m.24 views

Design/Logic Flaw

In startInputUncheckedLocked of InputMethodManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

2.1CVSS5.4AI score0.00157EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/12/15 4:15 p.m.5 views

CVE-2020-0500

In startInputUncheckedLocked of InputMethodManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

5.5CVSS5.6AI score0.00157EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/12/15 4:15 p.m.8 views

CVE-2020-27025

In EapFailureNotifier.java and SimRequiredNotifier.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

5.5CVSS5.6AI score0.00141EPSS
SaveExploits0References2
Prion
Prion
added 2020/12/15 4:15 p.m.25 views

Design/Logic Flaw

In createSimSelectNotification of SimSelectNotification.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

2.1CVSS5.8AI score0.00149EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/12/15 4:03 p.m.52 views

CVE-2020-27039

CVE-2020-27039 : A flaw in Android 11 related to postNotification in ServiceRecord.java enables a local permission bypass via an unsafe PendingIntent. This could lead to local information disclosure with low to medium risk (CVSSv3.1 base score 5.5; LOCAL, NONE user interaction). Exploitation is d...

5.5CVSS5.8AI score0.00149EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/15 4:03 p.m.34 views

CVE-2020-27039

In postNotification of ServiceRecord.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

5.9AI score0.00149EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/12/15 4:02 p.m.36 views

CVE-2020-27034

In createSimSelectNotification of SimSelectNotification.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

5.9AI score0.00149EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/12/15 4:00 p.m.40 views

CVE-2020-27025

In EapFailureNotifier.java and SimRequiredNotifier.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

6AI score0.00141EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/12/15 3:58 p.m.39 views

CVE-2020-0500

In startInputUncheckedLocked of InputMethodManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

6.1AI score0.00157EPSS
SaveExploits0References1
OSV
OSV
added 2020/12/01 12:00 a.m.45 views

ASB-A-154915372

In bindWallpaperComponentLocked of WallpaperManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.7AI score0.00168EPSS
SaveExploits0References2
NVD
NVD
added 2020/11/10 1:15 p.m.33 views

CVE-2020-0453

In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...

5.5CVSS5.2AI score0.00261EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2020/11/10 1:15 p.m.6 views

CVE-2020-0453

In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...

5.5CVSS5.6AI score0.00261EPSS
SaveExploits0References2
Prion
Prion
added 2020/11/10 1:15 p.m.25 views

Design/Logic Flaw

In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...

2.1CVSS5.4AI score0.00261EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/11/10 12:50 p.m.117 views

CVE-2020-0453

CVE-2020-0453 affects Android:66? In updateNotification of BeamTransferManager.java, an unsafe PendingIntent permits a local permission bypass leading to information disclosure with user privileges. Impact is described in Android’s 2020-11-01 bulletin under System (ID: CVE-2020-0453) with affecte...

5.5CVSS5.1AI score0.00261EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/11/10 12:50 p.m.37 views

CVE-2020-0453

In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...

5.4AI score0.00261EPSS
SaveExploits0References1
OSV
OSV
added 2020/11/01 12:00 a.m.32 views

ASB-A-159060474

In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local non-security issue with User execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.4AI score0.00261EPSS
SaveExploits0References2
OSV
OSV
added 2020/10/14 2:15 p.m.6 views

CVE-2020-0422

In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for...

3.3CVSS5.9AI score0.00166EPSS
SaveExploits0References1
NVD
NVD
added 2020/10/14 2:15 p.m.29 views

CVE-2020-0410

In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1...

5.5CVSS0.00157EPSS
SaveExploits0References1
OSV
OSV
added 2020/10/14 2:15 p.m.10 views

CVE-2020-0400

In showDataRoamingNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

5.5CVSS6.7AI score0.00196EPSS
SaveExploits0References1
Prion
Prion
added 2020/10/14 2:15 p.m.24 views

Design/Logic Flaw

In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for...

2.1CVSS3.7AI score0.00166EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder