35 matches found
CVE-2022-37005
The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2019-20620
An issue was discovered on Samsung mobile devices with P9.0 software. The Settings application allows unauthenticated changes. The Samsung IDs are SVE-2019-13814, SVE-2019-13815 March 2019...
EUVD-2019-11160
Malware in sbrugna...
EUVD-2010-1776
Malware in sbrugna...
CVE-2022-20515
In onPreferenceClick of AccountTypePreferenceLoader.java, there is a possible way to retrieve protected files from the Settings app due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
PT-2023-18168 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a missing permission check in the Settings application, allowing a user to change the SIM card. This could lead to local escalation of privilege without requirin...
PUB-A-220733496
In onPreferenceClick of AccountTypePreferenceLoader.java, there is a possible way to retrieve protected files from the Settings app due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
CVE-2022-37005
The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2022-37004
The Settings application has a vulnerability of bypassing the out-of-box experience OOBE. Successful exploitation of this vulnerability may affect the availability...
CVE-2022-37005
The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2022-37005
The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...
Design/Logic Flaw
The Settings application has a vulnerability of bypassing the out-of-box experience OOBE. Successful exploitation of this vulnerability may affect the availability...
CVE-2022-37005
CVE-2022-37005 is an argument/parameter injection vulnerability in the HarmonyOS Settings application. The issue can lead to data confidentiality exposure. The affected component is the Settings app on HarmonyOS; root cause is parameter injection. No exploit details are provided in the connected ...
CVE-2022-37005
The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2022-37005
The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2022-37004
The Settings application has a vulnerability of bypassing the out-of-box experience OOBE. Successful exploitation of this vulnerability may affect the availability...
CVE-2022-37004
CVE-2022-37004 describes a vulnerability in the Settings application of Huawei/HarmonyOS that allows bypassing the Out-Of-Box Experience (OOBE), with exploitation potentially impacting availability. The linked sources in the records confirm this OOBE bypass in HarmonyOS 2.0 and associate the issu...
PT-2022-23750 · Unknown · Settings Application
Name of the Vulnerable Software and Affected Versions: Settings application affected versions not specified Description: The issue is related to an argument injection vulnerability in the Settings application. Successful exploitation of this vulnerability may affect data confidentiality...
HUAWEI HarmonyOS 参数注入漏洞
HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in HUAWEI HarmonyOS version 2.0, which stems from a parameter injection vulnerability in the Settings...
CVE-2021-0505
In the Settings app, there is a possible way to disable an always-on VPN due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android...