Lucene search
+L

943 matches found

OSV
OSV
•added 2023/11/16 4:15 a.m.•23 views

UBUNTU-CVE-2023-47471

Buffer Overflow vulnerability in strukturag libde265 v1.10.12 allows a local attacker to cause a denial of service via the slicesegmentheader function in the slice.cc component...

6.5CVSS6.5AI score0.00766EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/11/15 12:00 a.m.•43 views

PT-2023-8955 · Libde265 +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.10.12 Description: The issue is related to a buffer overflow vulnerability in the slice segment header function within the slice.cc component of the libde265 video codec implementation. This vulnerability can be exploited b...

8.8CVSS7.6AI score0.00979EPSS
SaveExploits6References54
OSV
OSV
•added 2023/10/30 5:15 p.m.•18 views

CVE-2023-21295

In SliceManagerService, there is a possible way to check if a content provider is installed due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00109EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/30 5:15 p.m.•35 views

CVE-2023-21298

In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00097EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/30 5:15 p.m.•35 views

CVE-2023-21294

In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.2AI score0.00097EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/30 5:15 p.m.•14 views

CVE-2023-21298

In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00097EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/30 5:15 p.m.•27 views

Information disclosure

In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

4.3CVSS7.7AI score0.00097EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/10/30 5:15 p.m.•28 views

Information disclosure

In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

1.7CVSS5.8AI score0.00097EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/10/30 4:56 p.m.•37 views

CVE-2023-21298

In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.1AI score0.00097EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/10/30 4:56 p.m.•18 views

CVE-2023-21298

In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.4AI score0.00097EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/30 4:56 p.m.•67 views

CVE-2023-21298

CVE-2023-21298 is a disclosed vulnerability affecting Slice, described as a side-channel information disclosure that can lead to local privilege escalation without extra execution privileges or user interaction. Connected sources corroborate an installed-apps disclosure with local elevation of pr...

7.8CVSS7.4AI score0.00097EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/10/30 4:18 p.m.•34 views

CVE-2023-21294

In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.1AI score0.00097EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/10/30 4:18 p.m.•19 views

CVE-2023-21294

In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2AI score0.00097EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/30 4:18 p.m.•94 views

CVE-2023-21294

CVE-2023-21294 concerns Android’s Slice component, where a missing permission check enables local information disclosure by exposing installed packages. The exploit requires no user interaction and does not require additional privileges. The connected sources reiterate the same description but do...

5.5CVSS5.8AI score0.00097EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/10/30 12:00 a.m.•15 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability due to a missing NULL check in SliceManagerService. An attacker can exploit this vulnerability to obtain sensitive information...

5.5CVSS5.9AI score0.00109EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/30 12:00 a.m.•5 views

CVE-2023-21294: Missing Authorization

In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6AI score0.00097EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/30 12:00 a.m.•11 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability, which is caused by a lack of permission checking in Slice. The vulnerability can be exploited by an attacker to obtain sensitive information...

5.5CVSS6AI score0.00097EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/30 12:00 a.m.•3 views

CVE-2023-21298: Observable Discrepancy

In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00097EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/10/30 12:00 a.m.•13 views

PT-2023-18073 · Slice · Slice

Name of the Vulnerable Software and Affected Versions: Slice affected versions not specified Description: The issue is related to a missing permission check, which could lead to local information disclosure. No additional execution privileges are needed for exploitation, and user interaction is n...

5.5CVSS5.1AI score0.00097EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/09/13 12:00 a.m.•9 views

PT-2023-36008 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a null-dereference read crash. Technical details about the crash include the functions isvcd parse inter slice data cavlc enh lyr...

6.8AI score
SaveExploits0References2
Rows per page
Query Builder