Filtered by CWE-862
Total 6215 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-33889 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33890 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-04 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2024-10567 1 Woocommerce 1 Woocommerce 2024-12-04 7.5 High
The TI WooCommerce Wishlist plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wizard' function in all versions up to, and including, 2.9.1. This makes it possible for unauthenticated attackers to create new pages, modify plugin settings, and perform limited options updates.
CVE-2024-40709 1 Veeam 1 Agent 2024-12-04 N/A
A missing authorization vulnerability allows a local low-privileged user on the machine to escalate their privileges to root level.
CVE-2024-53938 1 Victure 1 Rx1800 Firmware 2024-12-03 8.8 High
An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices. The TELNET service is enabled by default and exposed over the LAN. The root account is accessible without a password, allowing attackers to achieve full control over the router remotely without any authentication.
CVE-2023-30913 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33898 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33899 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-32789 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33879 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 3.3 Low
In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33880 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 3.3 Low
In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33881 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33882 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33883 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33884 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33885 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33886 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2023-33887 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2024-12-03 5.5 Medium
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2024-0037 1 Google 1 Android 2024-12-03 3.3 Low
In applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a different user due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-21149 1 Google 1 Android 2024-12-03 7.8 High
In registerGsmaServiceIntentReceiver of ShannonRcsService.java, there is a possible way to activate/deactivate RCS service due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-270050709References: N/A