Lucene search
K

35 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:50 a.m.1 views

CVE-2022-37005

The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

7.5CVSS7.3AI score0.00284EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:7 a.m.4 views

CVE-2019-20620

An issue was discovered on Samsung mobile devices with P9.0 software. The Settings application allows unauthenticated changes. The Samsung IDs are SVE-2019-13814, SVE-2019-13815 March 2019...

7.5CVSS7.2AI score0.00093EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-11160

Malware in sbrugna...

7.5CVSS7.5AI score0.00093EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2010-1776

Malware in sbrugna...

5.8CVSS6.4AI score0.00338EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/22 10:6 p.m.3 views

CVE-2022-20515

In onPreferenceClick of AccountTypePreferenceLoader.java, there is a possible way to retrieve protected files from the Settings app due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS6.2AI score0.00018EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/10/30 12:0 a.m.2 views

PT-2023-18168 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a missing permission check in the Settings application, allowing a user to change the SIM card. This could lead to local escalation of privilege without requirin...

7.8CVSS7.5AI score0.00039EPSS
Exploits0References5
OSV
OSV
added 2022/12/01 12:0 a.m.3 views

PUB-A-220733496

In onPreferenceClick of AccountTypePreferenceLoader.java, there is a possible way to retrieve protected files from the Settings app due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS6.2AI score0.00018EPSS
Exploits0References2
OSV
OSV
added 2022/08/10 8:16 p.m.1 views

CVE-2022-37005

The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

7.5CVSS5.8AI score0.00284EPSS
Exploits0References2
OSV
OSV
added 2022/08/10 8:16 p.m.0 views

CVE-2022-37004

The Settings application has a vulnerability of bypassing the out-of-box experience OOBE. Successful exploitation of this vulnerability may affect the availability...

7.5CVSS5.8AI score
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/08/10 8:16 p.m.1 views

CVE-2022-37005

The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

7.5CVSS5.8AI score0.00284EPSS
Exploits0References3Affected Software3
NVD
NVD
added 2022/08/10 8:16 p.m.12 views

CVE-2022-37005

The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

7.5CVSS0.00284EPSS
Exploits0References2
Prion
Prion
added 2022/08/10 8:16 p.m.19 views

Design/Logic Flaw

The Settings application has a vulnerability of bypassing the out-of-box experience OOBE. Successful exploitation of this vulnerability may affect the availability...

5CVSS7.5AI score0.00191EPSS
Exploits0References2Affected Software3
CVE
CVE
added 2022/08/09 8:11 p.m.41 views

CVE-2022-37005

CVE-2022-37005 is an argument/parameter injection vulnerability in the HarmonyOS Settings application. The issue can lead to data confidentiality exposure. The affected component is the Settings app on HarmonyOS; root cause is parameter injection. No exploit details are provided in the connected ...

7.5CVSS7.7AI score0.00284EPSS
Exploits0References2Affected Software3
Cvelist
Cvelist
added 2022/08/09 8:11 p.m.13 views

CVE-2022-37005

The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

7.9AI score0.00284EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2022/08/09 8:11 p.m.0 views

CVE-2022-37005

The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

5.8AI score0.00284EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/08/09 8:10 p.m.13 views

CVE-2022-37004

The Settings application has a vulnerability of bypassing the out-of-box experience OOBE. Successful exploitation of this vulnerability may affect the availability...

7.7AI score0.00191EPSS
Exploits0References2
CVE
CVE
added 2022/08/09 8:10 p.m.47 views

CVE-2022-37004

CVE-2022-37004 describes a vulnerability in the Settings application of Huawei/HarmonyOS that allows bypassing the Out-Of-Box Experience (OOBE), with exploitation potentially impacting availability. The linked sources in the records confirm this OOBE bypass in HarmonyOS 2.0 and associate the issu...

7.5CVSS7.5AI score0.00191EPSS
Exploits0References2Affected Software3
Positive Technologies
Positive Technologies
added 2022/08/09 12:0 a.m.1 views

PT-2022-23750 · Unknown · Settings Application

Name of the Vulnerable Software and Affected Versions: Settings application affected versions not specified Description: The issue is related to an argument injection vulnerability in the Settings application. Successful exploitation of this vulnerability may affect data confidentiality...

7.5CVSS7.4AI score0.00284EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/08/05 12:0 a.m.1 views

HUAWEI HarmonyOS 参数注入漏洞

HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in HUAWEI HarmonyOS version 2.0, which stems from a parameter injection vulnerability in the Settings...

7.5CVSS7.4AI score0.00284EPSS
Exploits0References4
OSV
OSV
added 2021/06/21 5:15 p.m.2 views

CVE-2021-0505

In the Settings app, there is a possible way to disable an always-on VPN due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android...

7.8CVSS7.1AI score
Exploits0References1
Rows per page
Query Builder