|
210921
|
6.7 |
MEDIUM
Local
|
google
|
android
|
In fpc_ta_get_build_info of fpc_ta_kpi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges need…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-0010
|
2024-11-21 13:52 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210922
|
8.8 |
HIGH
Network
|
vestacp
|
vesta_control_panel
|
Vesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the fronte…
|
CWE-78
OS Command
|
CVE-2019-9859
|
2024-11-21 13:52 |
2020-03-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210923
|
7.0 |
HIGH
Local
|
google
|
android
|
In binder_thread_release of binder.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User…
|
CWE-362 CWE-416
Race Condition Use After Free
|
CVE-2020-0030
|
2024-11-21 13:52 |
2020-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210924
|
6.5 |
MEDIUM
Network
|
google
|
android
|
In notifyNetworkTested and related functions of NetworkMonitor.java, there is a possible bypass of private DNS settings. This could lead to remote information disclosure with no additional execution …
|
NVD-CWE-noinfo
|
CVE-2020-0028
|
2024-11-21 13:52 |
2020-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210925
|
7.8 |
HIGH
Local
|
google
|
android
|
In HidRawSensor::batch of HidRawSensor.cpp, there is a possible out of bounds write due to an unexpected switch fallthrough. This could lead to local escalation of privilege with no additional execut…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-0027
|
2024-11-21 13:52 |
2020-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210926
|
7.8 |
HIGH
Local
|
google
|
android
|
In Parcel::continueWrite of Parcel.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. U…
|
CWE-787 CWE-416
Out-of-bounds Write Use After Free
|
CVE-2020-0026
|
2024-11-21 13:52 |
2020-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210927
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In setPhonebookAccessPermission of AdapterService.java, there is a possible disclosure of user contacts over bluetooth due to a missing permission check. This could lead to local information disclosu…
|
CWE-862
Missing Authorization
|
CVE-2020-0023
|
2024-11-21 13:52 |
2020-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210928
|
8.8 |
HIGH
Adjacent
|
google huawei
|
android mate_20_firmware mate_20_pro_firmware mate_20_x_firmware p_smart_firmware p_smart_2019_firmware p20_firmware p20_pro_firmware p30_firmware p30_pro_firmware y6_20…
|
In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no addit…
|
CWE-682
Incorrect Calculation
|
CVE-2020-0022
|
2024-11-21 13:52 |
2020-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210929
|
6.5 |
MEDIUM
Network
|
google
|
android
|
In removeUnusedPackagesLPw of PackageManagerService.java, there is a possible permanent denial-of-service due to a missing package dependency test. This could lead to remote denial of service with Us…
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-0021
|
2024-11-21 13:52 |
2020-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210930
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In getAttributeRange of ExifInterface.java, there is a possible failure to redact location information from media files due to an incorrect bounds check. This could lead to local information disclosu…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2020-0020
|
2024-11-21 13:52 |
2020-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|