Lucene search
+L

70 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/15 12:00 a.m.•7 views

CVE-2020-0485: Missing Authorization

In areFunctionsSupported of UsbBackend.java, there is a possible access to tethering from a guest account due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8CVSS5.8AI score0.00139EPSS
SaveExploits0References2
OSV
OSV
•added 2020/09/18 3:15 p.m.•15 views

CVE-2020-0262

In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156353008...

7.8CVSS7.2AI score0.00151EPSS
SaveExploits0References1
NVD
NVD
•added 2020/09/18 3:15 p.m.•26 views

CVE-2020-0262

In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156353008...

7.8CVSS0.00151EPSS
SaveExploits0References1
Prion
Prion
•added 2020/09/18 3:15 p.m.•23 views

Privilege escalation

In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156353008...

4.6CVSS8.1AI score0.00151EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/09/18 3:02 p.m.•62 views

CVE-2020-0262

CVE-2020-0262 affects Android 11 and stems from an unsafe PendingIntent used in WiFi tethering, enabling local elevation of privilege with user execution privileges needed and no user interaction required. The issue is categorized as EoP, with impact on confidentiality/ integrity/ availability as...

7.8CVSS8.1AI score0.00151EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/09/18 3:02 p.m.•41 views

CVE-2020-0262

In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156353008...

8.4AI score0.00151EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/18 12:00 a.m.•2 views

CVE-2020-0262: Undefined Security Weakness

In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156353008...

7.8CVSS5.8AI score0.00151EPSS
SaveExploits0References1
OSV
OSV
•added 2020/03/10 9:15 p.m.•13 views

CVE-2020-0085

In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege to activate tethering with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8CVSS7.2AI score0.00145EPSS
SaveExploits0References1
NVD
NVD
•added 2020/03/10 9:15 p.m.•30 views

CVE-2020-0085

In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege to activate tethering with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8CVSS8.3AI score0.00145EPSS
SaveExploits0References1
Prion
Prion
•added 2020/03/10 9:15 p.m.•25 views

Design/Logic Flaw

In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege to activate tethering with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

4.6CVSS7.7AI score0.00145EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
•added 2019/10/26 8:49 p.m.•147 views

Tails 4.0 - Live System to Preserve Your Privacy and Anonymity

Tails is a live system that aims to preserve your privacy and anonymity. It helps you to use the Internet anonymously and circumvent censorship almost anywhere you go and on any computer but leaving no trace unless you ask it to explicitly. It is a complete operating system designed to be used fr...

7.5AI score
SaveExploits0References1
Prion
Prion
•added 2017/10/20 3:29 p.m.•29 views

Design/Logic Flaw

In F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code TAC database file via HTTPS, the server's certificate is not verified. Attackers in a privileged network position may be able to launch a man-in-the-middle attack against these connections. TAC databases are used in...

5.8CVSS7.4AI score0.00599EPSS
SaveExploits0References1Affected Software1
The Hacker News
The Hacker News
•added 2016/08/30 5:09 a.m.•9 views

Record-breaking 1.9 Gbps Internet Speed achieved over 4G Mobile Connection

Elisa, one of the biggest Finnish Internet Service Providers ISP, claims to have achieved a new world record for 4G network with 1.9 gigabit-per-second Gbps data download speed using Huawei technology. Currently, Sweden and the United Kingdom have been crowned as the top countries across the worl...

6.8AI score
SaveExploits0
CNVD
CNVD
•added 2016/08/09 12:00 a.m.•20 views

Android netd Denial of Service Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. netd is a network daemon. A security vulnerability exists in netd in versions of Android prior to 2016-08-05, which stems from the program's failure to properly handle tethering a...

7.8CVSS6.6AI score0.00474EPSS
SaveExploits0References1
OSV
OSV
•added 2016/08/06 10:59 a.m.•14 views

CVE-2016-3856

netd in Android before 2016-08-05 mishandles tethering and stdio streams, which allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted application, aka Qualcomm internal bug CR959631...

7.8CVSS7.4AI score0.00474EPSS
SaveExploits0References4
OSV
OSV
•added 2016/08/06 10:59 a.m.•15 views

UBUNTU-CVE-2016-3856

netd in Android before 2016-08-05 mishandles tethering and stdio streams, which allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted application, aka Qualcomm internal bug CR959631...

7.8CVSS7.2AI score0.00474EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2016/08/06 10:00 a.m.•41 views

CVE-2016-3856

netd in Android before 2016-08-05 mishandles tethering and stdio streams, which allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted application, aka Qualcomm internal bug CR959631...

7.9AI score0.00474EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/08/06 12:00 a.m.•5 views

CVE-2016-3856: Undefined Security Weakness

netd in Android before 2016-08-05 mishandles tethering and stdio streams, which allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted application, aka Qualcomm internal bug CR959631...

7.8CVSS7.4AI score0.00474EPSS
SaveExploits0References2
OSV
OSV
•added 2016/05/09 10:59 a.m.•20 views

CVE-2016-2060

server/TetherController.cpp in the tethering controller in netd, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly validate upstream interface names, which allows attackers to bypass intended access restrictions via a...

7.8CVSS5.8AI score0.00466EPSS
SaveExploits0References2
NVD
NVD
•added 2016/05/09 10:59 a.m.•43 views

CVE-2016-2060

server/TetherController.cpp in the tethering controller in netd, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly validate upstream interface names, which allows attackers to bypass intended access restrictions via a...

9.3CVSS7.4AI score0.00466EPSS
SaveExploits0References2
Rows per page
Query Builder