Google Android Information Disclosure Vulnerability (CNVD-2024-00165)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability due to a lack of permission checking in Package Manager. An attacker can exploit this vulnerability to obtain sensitive information...

Jenkins Plugin Build Failure Analyzer Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...

Google Android onCreate module authorization issue vulnerability

Google Android is a Linux-based open source operating system from Google. Google Android onCreate module has an authorization issue vulnerability that stems from a lack of permission checking in the onCreate module of ManagePermissionsActivity.java, with one possible way to bypass the Restore...

Bluetooth chipset Unisoc Unauthenticated Access Disclosure

The vulnerability of Bluetooth microprogrammed chipset devices from Unisoc lies in the lack of permission checking. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

CVE-2023-2640

The OverlayFS module in the Ubuntu kernel is vulnerable to local privilege escalation. Specifically, in kernels carrying both c914c0e27eb0 and the "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs. xattrs" * patch, unprivileged users can set privileged extended attributes ...

CVE-2023-38503 Directus has Incorrect Permission Checking for GraphQL Subscriptions

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 10.3.0 and prior to version 10.5.0, the permission filters i.e. usercreated IS $CURRENTUSER are not properly checked when using GraphQL subscription resulting in unauthorized users getting event o...

PT-2023-18716 · Unknown · Contour Service

Name of the Vulnerable Software and Affected Versions: Contour Service affected versions not specified Description: The issue concerns a lack of permission checking in the Contour Service, allowing an attacker to create analyses for datasets they do not have permission for. This could lead to...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the US company Google. Google Android suffers from a security vulnerability that stems from a lack of permission checking, which could bypass restrictions for tracking and could lead to local privilege escalation without additional...

Google Android Information Disclosure Vulnerability (CNVD-2023-41883)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability caused by a lack of permission checking in AnalyzeMfcResp of NxpMfcReader.cc. An attacker can exploit the vulnerability to obtain sensitive information...

Google Android Information Disclosure Vulnerability (CNVD-2023-46126)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability due to a lack of permission checking in the applySyncTransaction of WindowOrganizer.java. An attacker can exploit this vulnerability to obtain sensitive...

Google Android Information Disclosure Vulnerability (CNVD-2023-55376)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that originates from a lack of permission checking in the multiple functions of the RunningTasks.java component, which can be exploited by an attacker to...

Google Android Denial of Service Vulnerability (CNVD-2023-55364)

Google Android is a Linux-based open source operating system from Google. A denial of service vulnerability exists in Google Android, which stems from a lack of permission checking in the canDisplayLocalUi of the AppLocalePickerActivity.java component, which can be exploited by an attacker to cau...

Jenkins Plugin Quay.io trigger 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

Apiman 安全漏洞

Apiman is Apiman open source a flexible open source API management platform for enterprise users. A security vulnerability exists in versions prior to Apiman 3.1.0.Final that stems from a lack of permission checking. Attackers exploiting the vulnerability were able to access API keys to which the...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google. Google Pixel has a security vulnerability that stems from a lack of permission checking...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from a lack of permission checking and possible permission bypass...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from a lack of permission checking and possible permission bypass...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from a lack of permission checking and possible permission bypass...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from a lack of permission checking and possible permission bypass...

CVE-2023-27310

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.2. The client query handler of the affected application fails to check for proper permissions when assigning groups to user accounts. This could allow an authenticated remote attacker to assign administrative groups to...