|
196671
|
7.4 |
HIGH
Network
|
juniper
|
ctpview
|
The Juniper Networks CTPView server is not enforcing HTTP Strict Transport Security (HSTS). HSTS is an optional response header which allows servers to indicate that content from the requested domain…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2021-0296
|
2024-11-21 14:42 |
2021-10-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196672
|
7.3 |
HIGH
Local
|
google
|
android
|
In onCreate of BluetoothPairingDialog, there is a possible way to enable Bluetooth without user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User …
|
CWE-1021
Improper Restriction of Rendered UI Layers or Frames
|
CVE-2021-0583
|
2024-11-21 14:42 |
2021-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196673
|
7.3 |
HIGH
Local
|
google
|
android
|
In onCreate of ConfirmConnectActivity.java, there is a possible pairing of untrusted Bluetooth devices due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User e…
|
CWE-1021
Improper Restriction of Rendered UI Layers or Frames
|
CVE-2021-0598
|
2024-11-21 14:42 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196674
|
7.8 |
HIGH
Local
|
google
|
android
|
In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the profile PIN, after logging in. This could lead to local escalation of privilege with…
|
CWE-287
Improper Authentication
|
CVE-2021-0595
|
2024-11-21 14:42 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196675
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In memory management driver, there is a possible side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction …
|
NVD-CWE-noinfo
|
CVE-2021-0425
|
2024-11-21 14:42 |
2021-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196676
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interactio…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2021-0424
|
2024-11-21 14:42 |
2021-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196677
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In memory management driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User…
|
CWE-665
Improper Initialization
|
CVE-2021-0423
|
2024-11-21 14:42 |
2021-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196678
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interactio…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2021-0422
|
2024-11-21 14:42 |
2021-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196679
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In memory management driver, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. …
|
CWE-120
Classic Buffer Overflow
|
CVE-2021-0421
|
2024-11-21 14:42 |
2021-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196680
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interactio…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2021-0420
|
2024-11-21 14:42 |
2021-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|