Lucene search
K

720 matches found

Positive Technologies
Positive Technologies
added 2023/11/24 12:0 a.m.2 views

PT-2023-35610 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow write crash. Technical details about the crash include the functions isvcd start of pic, isvcd parse decod...

7AI score
Exploits0References2
NVD
NVD
added 2023/11/16 4:15 a.m.22 views

CVE-2023-47471

Buffer Overflow vulnerability in strukturag libde265 v1.10.12 allows a local attacker to cause a denial of service via the slicesegmentheader function in the slice.cc component...

6.5CVSS0.00299EPSS
Exploits0References3
OSV
OSV
added 2023/11/16 4:15 a.m.1 views

DEBIAN-CVE-2023-47471

Buffer Overflow vulnerability in strukturag libde265 v1.10.12 allows a local attacker to cause a denial of service via the slicesegmentheader function in the slice.cc component...

6.5CVSS5.8AI score0.00299EPSS
Exploits0References1
OSV
OSV
added 2023/11/16 4:15 a.m.0 views

UBUNTU-CVE-2023-47471

Buffer Overflow vulnerability in strukturag libde265 v1.10.12 allows a local attacker to cause a denial of service via the slicesegmentheader function in the slice.cc component...

6.5CVSS6.5AI score0.00299EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/11/15 12:0 a.m.2 views

PT-2023-8955 · Libde265 +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.10.12 Description: The issue is related to a buffer overflow vulnerability in the slice segment header function within the slice.cc component of the libde265 video codec implementation. This vulnerability can be exploited b...

8.8CVSS7.6AI score0.0051EPSS
Exploits6References54
NVD
NVD
added 2023/10/30 5:15 p.m.16 views

CVE-2023-21298

In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00016EPSS
Exploits0References1
OSV
OSV
added 2023/10/30 5:15 p.m.0 views

CVE-2023-21298

In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score
Exploits0References1
OSV
OSV
added 2023/10/30 5:15 p.m.1 views

CVE-2023-21295

In SliceManagerService, there is a possible way to check if a content provider is installed due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00025EPSS
Exploits0References1
NVD
NVD
added 2023/10/30 5:15 p.m.16 views

CVE-2023-21294

In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.2AI score0.00022EPSS
Exploits0References1
Prion
Prion
added 2023/10/30 5:15 p.m.15 views

Information disclosure

In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

4.3CVSS7.7AI score0.00016EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2023/10/30 5:15 p.m.14 views

Information disclosure

In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

1.7CVSS5.8AI score0.00022EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/30 4:56 p.m.11 views

CVE-2023-21298

In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.4AI score0.00016EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/10/30 4:56 p.m.15 views

CVE-2023-21298

In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.1AI score0.00016EPSS
Exploits0References1
CVE
CVE
added 2023/10/30 4:56 p.m.39 views

CVE-2023-21298

CVE-2023-21298 is a disclosed vulnerability affecting Slice, described as a side-channel information disclosure that can lead to local privilege escalation without extra execution privileges or user interaction. Connected sources corroborate an installed-apps disclosure with local elevation of pr...

7.8CVSS7.4AI score0.00016EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/10/30 4:18 p.m.66 views

CVE-2023-21294

CVE-2023-21294 concerns Android’s Slice component, where a missing permission check enables local information disclosure by exposing installed packages. The exploit requires no user interaction and does not require additional privileges. The connected sources reiterate the same description but do...

5.5CVSS5.8AI score0.00022EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/30 4:18 p.m.13 views

CVE-2023-21294

In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2AI score0.00022EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/10/30 4:18 p.m.12 views

CVE-2023-21294

In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.1AI score0.00022EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/10/30 12:0 a.m.3 views

PT-2023-18073 · Slice · Slice

Name of the Vulnerable Software and Affected Versions: Slice affected versions not specified Description: The issue is related to a missing permission check, which could lead to local information disclosure. No additional execution privileges are needed for exploitation, and user interaction is n...

5.5CVSS5.1AI score0.00022EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/10/30 12:0 a.m.1 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability, which is caused by a lack of permission checking in Slice. The vulnerability can be exploited by an attacker to obtain sensitive information...

5.5CVSS6AI score0.00022EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/10/30 12:0 a.m.2 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability due to a missing NULL check in SliceManagerService. An attacker can exploit this vulnerability to obtain sensitive information...

5.5CVSS5.9AI score0.00025EPSS
Exploits0References3
Rows per page
Query Builder