|
212531
|
2.3 |
LOW
Local
|
google
|
android
|
In the WifiConfigManager, there is a possible storage of location history which can only be deleted by triggering a factory reset. This could lead to local information disclosure with System executio…
|
CWE-200
Information Exposure
|
CVE-2020-0029
|
2024-11-21 13:52 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212532
|
6.7 |
MEDIUM
Local
|
google
|
android
|
In fpc_ta_pn_get_unencrypted_image of fpc_ta_pn.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-0012
|
2024-11-21 13:52 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212533
|
6.7 |
MEDIUM
Local
|
google
|
android
|
In get_auth_result of fpc_ta_hw_auth.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-0011
|
2024-11-21 13:52 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212534
|
6.7 |
MEDIUM
Local
|
google
|
android
|
In fpc_ta_get_build_info of fpc_ta_kpi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges need…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-0010
|
2024-11-21 13:52 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212535
|
8.8 |
HIGH
Network
|
vestacp
|
vesta_control_panel
|
Vesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the fronte…
|
CWE-78
OS Command
|
CVE-2019-9859
|
2024-11-21 13:52 |
2020-03-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212536
|
7.0 |
HIGH
Local
|
google
|
android
|
In binder_thread_release of binder.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User…
|
CWE-362 CWE-416
Race Condition Use After Free
|
CVE-2020-0030
|
2024-11-21 13:52 |
2020-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212537
|
6.5 |
MEDIUM
Network
|
google
|
android
|
In notifyNetworkTested and related functions of NetworkMonitor.java, there is a possible bypass of private DNS settings. This could lead to remote information disclosure with no additional execution …
|
NVD-CWE-noinfo
|
CVE-2020-0028
|
2024-11-21 13:52 |
2020-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212538
|
7.8 |
HIGH
Local
|
google
|
android
|
In HidRawSensor::batch of HidRawSensor.cpp, there is a possible out of bounds write due to an unexpected switch fallthrough. This could lead to local escalation of privilege with no additional execut…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-0027
|
2024-11-21 13:52 |
2020-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212539
|
7.8 |
HIGH
Local
|
google
|
android
|
In Parcel::continueWrite of Parcel.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. U…
|
CWE-787 CWE-416
Out-of-bounds Write Use After Free
|
CVE-2020-0026
|
2024-11-21 13:52 |
2020-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212540
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In setPhonebookAccessPermission of AdapterService.java, there is a possible disclosure of user contacts over bluetooth due to a missing permission check. This could lead to local information disclosu…
|
CWE-862
Missing Authorization
|
CVE-2020-0023
|
2024-11-21 13:52 |
2020-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|