Lucene search
+L

296 matches found

Openbugbounty
Openbugbounty
added 2022/12/21 12:07 p.m.14 views

speaker-repair.de Cross Site Scripting vulnerability OBB-3112564

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/08/12 3:15 p.m.13 views

CVE-2022-20317

In SystemUI, there is a possible way to unexpectedly enable the external speaker due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Androi...

5.5CVSS6.1AI score0.00121EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/12 3:15 p.m.10 views

CVE-2022-20317

In SystemUI, there is a possible way to unexpectedly enable the external speaker due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Androi...

5.5CVSS5.9AI score0.00121EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/12 3:15 p.m.20 views

Information disclosure

In SystemUI, there is a possible way to unexpectedly enable the external speaker due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Androi...

1.9CVSS5.5AI score0.00121EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/11 3:25 p.m.43 views

CVE-2022-20317

In SystemUI, there is a possible way to unexpectedly enable the external speaker due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Androi...

5.9AI score0.00121EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/11 3:25 p.m.63 views

CVE-2022-20317

CVE-2022-20317 affects Android 13 SystemUI. A logic error in SystemUI could allow local information disclosure by enabling the external speaker; exploitation requires user interaction and no extra privileges. The issue is documented across multiple sources (NVD entry, RH Red Hat CVE page, CNVD/CN...

5.5CVSS5.2AI score0.00121EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/11 12:00 a.m.9 views

PT-2022-14542 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-13 Description: In SystemUI, a logic error in the code could lead to the unexpected enabling of the external speaker. This issue may result in local information disclosure without requiring additional execution...

5.5CVSS5.2AI score0.00121EPSS
SaveExploits0References3
HackRead
HackRead
added 2022/08/02 10:45 p.m.22 views

Taiwanese President and Top Govt Sites Hit by DDoS Attacks Amid Pelosi visit

By Waqas The DDoS attacks also targeted the countrys largest airport, the Defence and Foreign Ministry. As US House Speaker… This is a post from HackRead.com Read the original post: Taiwanese President and Top Govt Sites Hit by DDoS Attacks Amid Pelosi visit...

0.6AI score
SaveExploits0
CNVD
CNVD
added 2022/04/11 12:00 a.m.24 views

Huawei FLMG-10 Authorization Issues Vulnerability

Huawei FLMG-10 is a high-end Bluetooth remote control speaker from Huawei, China. The Huawei FLMG-10 suffers from an authorization issue vulnerability that stems from incorrect authentication issues. A local attacker can exploit the vulnerability to install a persistent and cryptic bootstrap or...

7.2CVSS7.4AI score0.00194EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/04/07 12:00 a.m.7 views

Huawei FLMG-10 授权问题漏洞

Huawei FLMG-10 is a high-end Bluetooth remote control speaker from Huawei, China. The Huawei FLMG-10 suffers from an authorization issue vulnerability that stems from incorrect authentication issues. A local attacker can exploit the vulnerability to install a persistent and cryptic bootstrap or...

7.2CVSS5.7AI score0.00194EPSS
SaveExploits0References3
OSV
OSV
added 2022/02/27 3:28 a.m.15 views

GSD-2022-1000589 ASoC: max9759: fix underflow in speaker_gain_control_put()

ASoC: max9759: fix underflow in speakergaincontrolput This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/02/18 9:58 p.m.27 views

GSD-2022-1000230 ASoC: max9759: fix underflow in speaker_gain_control_put()

ASoC: max9759: fix underflow in speakergaincontrolput This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.99 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/02/18 9:51 p.m.16 views

GSD-2022-1000175 ASoC: max9759: fix underflow in speaker_gain_control_put()

ASoC: max9759: fix underflow in speakergaincontrolput This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.178 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/02/18 9:46 p.m.15 views

GSD-2022-1000141 ASoC: max9759: fix underflow in speaker_gain_control_put()

ASoC: max9759: fix underflow in speakergaincontrolput This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.228 by commit...

7.2AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/02/18 8:15 p.m.5 views

CVE-2022-24049

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ALAC audio codec...

10CVSS6.4AI score0.07212EPSS
SaveExploits0References2
NVD
NVD
added 2022/02/18 8:15 p.m.24 views

CVE-2022-24046

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anacapd...

9.8CVSS0.04085EPSS
SaveExploits0References1
NVD
NVD
added 2022/02/18 8:15 p.m.24 views

CVE-2022-24049

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ALAC audio codec...

10CVSS0.07212EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/18 8:15 p.m.6 views

CVE-2022-24046

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anacapd...

9.8CVSS6.2AI score0.04085EPSS
SaveExploits0References2
OSV
OSV
added 2022/02/18 8:15 p.m.9 views

CVE-2022-24049

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ALAC audio codec...

9.8CVSS7.7AI score0.07212EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/18 8:15 p.m.24 views

Stack overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ALAC audio codec...

10CVSS9.7AI score0.07212EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder