Urbandroid Sleep 安全漏洞

Urbandroid Sleep is an app from Urbandroid Inc. which is used to track the sleep of customers. A security vulnerability exists in Urbandroid Sleep version v.20230303 that originates from an unauthorized application causing a persistent denial of service by manipulating the SharedPreference file...

Design/Logic Flaw

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database...

BestWeather 安全漏洞

BestWeather is a weather advisor application from BestWeather open source. A security vulnerability exists in BestWeather version v.7.3.1, which stems from allowing an unauthorized application to cause a privilege escalation attack by manipulating the database...

CVE-2023-21495

Improper access control vulnerability in Knox Enrollment Service prior to SMR May-2023 Release 1 allow attacker install KSP app when device admin is set...

CVE-2022-36442

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is possible to install an unauthorized application via a downloaded APK...

Zebra Technologies Enterprise Home Screen 安全漏洞

Zebra Technologies Enterprise Home Screen is a free Android app from Zebra Technologies, Inc. provides administrators with an easy way to control access to applications and settings on Zebra devices. A security vulnerability exists in Zebra Technologies Enterprise Home Screen version 4.1.19, whic...

Information disclosure

In Settings, there is a possible way for an application without permissions to read content of WiFi QR codes due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

PT-2022-2300 · Cisco · Cisco Iox +1

Name of the Vulnerable Software and Affected Versions: Cisco IOx affected versions not specified Description: The issue exists due to incorrect restriction of a directory path name with limited access. An attacker could inject arbitrary commands into the underlying host operating system, execute...

CVE-2021-41166

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 may lead to sensitive information disclosure. An unauthorized app that does not have the otherwise required MANAGEDOCUMENTS permission may view image thumbnails...

CVE-2021-41166

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 may lead to sensitive information disclosure. An unauthorized app that does not have the otherwise required MANAGEDOCUMENTS permission may view image thumbnails...

Information disclosure

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 may lead to sensitive information disclosure. An unauthorized app that does not have the otherwise required MANAGEDOCUMENTS permission may view image thumbnails...

CVE-2021-41166

CVE-2021-41166 affects the Nextcloud Android app. An unauthorized app lacking the MANAGE_DOCUMENTS permission may view image thumbnails for images it should not access. The issue is fixed in version 3.17.1; there are no known workarounds. Users and administrators should upgrade to 3.17.1 or later...

Samsung on7xeltelgt Access Control Error Vulnerability

Samsung on7xeltelgt is a smartphone from the South Korean company Samsung Samsung. An access control error vulnerability exists in Samsung on7xeltelgt. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacke...

CVE-2019-15450

The Samsung j3popeltecan Android device with a build fingerprint of samsung/j3popeltevl/j3popeltecan:8.1.0/M1AJQ/J327WVLS3BSA2:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000100, versionName=7.0.1.0 that allows other...

CVE-2019-15383

The Allview X5 Android device with a build fingerprint of ALLVIEW/X5SoulMini/X5SoulMini:8.1.0/O11019/1522468763:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to...

Code injection

The Samsung J7 Neo Android device with a build fingerprint of samsung/j7velteub/j7velte:8.1.0/M1AJQ/J701MUBS6BSB3:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000100, versionName=7.0.1.0 that allows other pre-installed apps...

CVE-2019-15465

The Samsung J7 Pro Android device with a build fingerprint of samsung/j7y17lteubm/j7y17lte:8.1.0/M1AJQ/J730GMUBS6BSC1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000100, versionName=7.0.1.0 that allows other pre-installed...

CVE-2019-15455

The Samsung J5 Android device with a build fingerprint of samsung/j5y17ltexx/j5y17lte:8.1.0/M1AJQ/J530FXXU3BRL1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000100, versionName=7.0.1.0 that allows other pre-installed apps t...

CVE-2019-15454

The CVE-2019-15454 entry describes a vulnerability in the Samsung J4 (Android 8.0, build samsung/j4lteub/j4lte:8.0.0) where a pre-installed app com.samsung.android.themecenter (versionCode 7000000) exposes a component that lets other pre-installed apps perform app installation. Exploitation requi...

CVE-2019-15453

The CVE-2019-15453 entry describes a vulnerability in the Samsung J4 with build Samsung/j4lteub/j4lte:8.0.0/R16NW/J400MUBS2ASC2:user/release-keys, where a pre-installed app (com.samsung.android.themecenter, v7.0.0.0) exposes an accessible component that allows other pre-installed apps to install ...