漏洞 - 第496页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2015-9081

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：11 | 回复：0
CVE漏洞

CVE-2015-9080

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：18 | 回复：0
CVE漏洞

CVE-2015-9079

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：22 | 回复：0
CVE漏洞

CVE-2015-9078

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：22 | 回复：0
CVE漏洞

CVE-2015-9077

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：21 | 回复：0
CVE漏洞

CVE-2015-9076

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：13 | 回复：0
CVE漏洞

CVE-2015-9075

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：13 | 回复：0
CVE漏洞

CVE-2015-9074

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-41281

Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version 1.47.1, Synapse instances with the media repository enabled can be tricked into downloading a file from a remo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-0988

In getLaunchedFromUid and getLaunchedFromPackage of ActivityClientController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel info ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：47 | 回复：0
CVE漏洞

CVE-2021-0987

In getNeighboringCellInfo of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：40 | 回复：0
CVE漏洞

CVE-2021-0986

In hasGrantedPolicy of DevicePolicyManagerService.java, there is a possible information disclosure about the device owner, profile owner, or device admin due to a logic error in the code. This could l ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：52 | 回复：0
CVE漏洞

CVE-2021-0985

In onReceive of AlertReceiver.java, there is a possible way to dismiss system dialog due to a missing permission check. This could lead to local escalation of privilege with no additional execution pr ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：62 | 回复：0
CVE漏洞

CVE-2021-0984

In onNullBinding of ManagedServices.java, there is a possible permission bypass due to an incorrectly unbound service. This could lead to local escalation of privilege with no additional execution pri ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：46 | 回复：0
CVE漏洞

CVE-2021-0983

In createAdminSupportIntent of DevicePolicyManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：39 | 回复：0
CVE漏洞

CVE-2021-0982

In getOrganizationNameForUser of DevicePolicyManagerService.java, there is a possible organization name disclosure due to a missing permission check. This could lead to local information disclosure wi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：42 | 回复：0
CVE漏洞

CVE-2021-0981

In enqueueNotificationInternal of NotificationManagerService.java, there is a possible way to run a foreground service without showing a notification due to improper input validation. This could lead ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：40 | 回复：0
CVE漏洞

CVE-2021-0979

In isRequestPinItemSupported of ShortcutService.java, there is a possible cross-user leak of packages in which the default launcher supports requests to create pinned shortcuts due to a permissions by ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：42 | 回复：0
CVE漏洞

CVE-2021-0978

In getSerialForPackage of DeviceIdentifiersPolicyService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：44 | 回复：0
CVE漏洞

CVE-2021-0977

In phNxpNHal_DtaUpdate of phNxpNciHal_dta.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privilege ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：32 | 回复：0
CVE漏洞

CVE-2021-0976

In toBARK of floor0.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User inter ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：44 | 回复：0
CVE漏洞

CVE-2021-0973

In isFileUri of UriUtil.java, there is a possible way to bypass ignoring file://URI attachment due to improper handling of case sensitivity. This could lead to local information disclosure with no add ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：76 | 回复：0
CVE漏洞

CVE-2021-0971

In MPEG4Source::read of MPEG4Extractor.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privile ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：43 | 回复：0
CVE漏洞

CVE-2021-0970

In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. This could lead to local escalation of privilege with no additional execution privi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：39 | 回复：0
CVE漏洞

CVE-2021-0969

In getTitle of AccessPoint.java, there is a possible unhandled exception due to a missing null check. This could lead to remote denial of service if a proximal Wi-Fi AP provides invalid information wi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：37 | 回复：0
CVE漏洞

CVE-2021-0968

In osi_malloc and osi_calloc of allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges neede ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-0967

In vorbis_book_decodev_set of codebook.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privilege ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-0966

In code generated by BuildParcelFields of generate_cpp.cpp, there is a possible way for a crafted parcelable to reveal uninitialized memory of a target process due to uninitialized data. This could le ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-0965

In AndroidManifest.xml of Settings, there is a possible pairing of a Bluetooth device without user's consent due to a missing permission check. This could lead to local escalation of privilege wit ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：51 | 回复：0
CVE漏洞

CVE-2021-0964

In C2SoftMP3::process() of C2SoftMp3Dec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privil ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：43 | 回复：0
CVE漏洞

CVE-2021-0963

In onCreate of KeyChainActivity.java, there is a possible way to use an app certificate stored in keychain due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：45 | 回复：0
CVE漏洞

CVE-2021-0961

In quota_proc_write of xt_quota2.c, there is a possible way to read kernel memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. Us ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：41 | 回复：0
CVE漏洞

CVE-2021-0958

In update of km_compat.cpp, there is a possible loss of potentially sensitive data due to a logic error in the code. This could lead to local denial of service with User execution privileges needed. U ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：54 | 回复：0
CVE漏洞

CVE-2021-0956

In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no addition ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：45 | 回复：0
CVE漏洞

CVE-2021-0955

In pf_write_buf of FuseDaemon.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：43 | 回复：0
CVE漏洞

CVE-2021-0954

In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User intera ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-0953

In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmarks without permission due to an unsafe PendingIntent. This could lead to local e ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：35 | 回复：0
CVE漏洞

CVE-2021-0952

In doCropPhoto of PhotoSelectionHandler.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure of user's contacts with no additional ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：39 | 回复：0
CVE漏洞

CVE-2021-0933

In onCreate of CompanionDeviceActivity.java or DeviceChooserActivity.java, there is a possible way for HTML tags to interfere with a consent dialog due to improper input validation. This could lead to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：45 | 回复：0
CVE漏洞

CVE-2021-0932

In showNotification of NavigationModeController.java, there is a possible confused deputy due to an unsafe PendingIntent. This could lead to local escalation of privilege that allows actions performed ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:38 | 阅读：38 | 回复：0