Lucene search
K

13 matches found

OSV
OSV
added 2023/06/09 9:15 p.m.2 views

CVE-2023-29751

An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files...

5.5CVSS5.8AI score0.00039EPSS
Exploits1References1
OSV
OSV
added 2023/06/09 8:15 p.m.0 views

CVE-2023-29749

An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files...

7.8CVSS7.1AI score0.00045EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2023/06/09 8:15 p.m.0 views

CVE-2023-29749

An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files...

7.8CVSS7AI score0.00045EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2023/06/09 8:15 p.m.1 views

CVE-2023-29756

An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files...

5.5CVSS6.1AI score0.00039EPSS
Exploits1References2
Prion
Prion
added 2023/05/30 8:15 p.m.9 views

Denial of service

SoLive 1.6.14 thru 1.6.20 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. When an...

5CVSS7.2AI score0.0038EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/30 12:0 a.m.3 views

PT-2023-22383 · Solive · Solive

Name of the Vulnerable Software and Affected Versions: SoLive versions 1.6.14 through 1.6.20 for Android Description: The issue concerns an exposed component that provides a method to modify the SharedPreference file. An attacker can exploit this to modify data in any SharedPreference file, which...

9.8CVSS6.9AI score0.00233EPSS
Exploits1References3
OSV
OSV
added 2023/04/11 1:15 a.m.2 views

CVE-2023-27191

An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of service via the SharedPreference files...

7.5CVSS5.8AI score0.0038EPSS
Exploits1References3
Hacker One
Hacker One
added 2021/03/10 11:6 p.m.162 views

GitHub Security Lab: [Java] CWE-312: Query to detect cleartext storage of sensitive information using Android SharedPreferences

This bug was reported directly to GitHub Security Lab...

1.1AI score
Exploits0
NVD
NVD
added 2019/04/04 3:29 p.m.12 views

CVE-2018-19981

Amazon AWS SDK =2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS Cognito Identity Service. An attacker can use these credentials to create authenticated and/or authorized requests. Note that the attacker must have "root" privilege...

9CVSS6.9AI score0.00489EPSS
Exploits1References4
OSV
OSV
added 2019/04/04 3:29 p.m.12 views

CVE-2018-19981

Amazon AWS SDK =2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS Cognito Identity Service. An attacker can use these credentials to create authenticated and/or authorized requests. Note that the attacker must have "root" privilege...

7.2CVSS6.7AI score
Exploits0References4
Prion
Prion
added 2019/04/04 3:29 p.m.13 views

Design/Logic Flaw

Amazon AWS SDK =2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS Cognito Identity Service. An attacker can use these credentials to create authenticated and/or authorized requests. Note that the attacker must have "root" privilege...

9CVSS6.8AI score0.00489EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2019/04/04 2:34 p.m.11 views

CVE-2018-19981

Amazon AWS SDK =2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS Cognito Identity Service. An attacker can use these credentials to create authenticated and/or authorized requests. Note that the attacker must have "root" privilege...

7AI score0.00489EPSS
Exploits1References4
CVE
CVE
added 2019/04/04 2:34 p.m.57 views

CVE-2018-19981

CVE-2018-19981 : The AWS SDK for Android (versions

9CVSS6.8AI score0.00489EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder