CVE Vulnerability Catalog

A local privilege escalation vulnerability in Quanos SCHEMA ST4 on-premises allows an authenticated attacker to execute arbitrary code with SYSTEM privileges via insecure deserialization in the .NET Remoting service.

An authenticated OS command injection vulnerability exists in the BigPond Cable (BPA) WAN configuration module in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges.

An authenticated OS command injection vulnerability exists in the IPv6 PPPoE configuration handler in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges.

In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed.

In the tryStartActivity method of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed.

In NFC, there is a possible way to spoof an NFC event due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.

In SettingsLib, there is a possible missing permission check due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed.

In the createSessionInternal method of PackageInstallerService.java, there is a possible method to remove a DPC app from a managed device without DO consent due to desync from persistence. This could lead to local escalation of privilege if a user can install a malicious app with no additional execution privileges needed.

In the setAllowedCarriers method of PhoneInterfaceManager.java, there is a logic error that may allow disabling carrier restrictions. This could lead to local privilege escalation without the need for additional execution privileges.

In SettingsLib, there is a logic error that may allow disabling system components. This could lead to local escalation of privilege without the need for additional execution privileges.

There is an unauthenticated local file inclusion vulnerability in Truemag versions <= 4.3.14.2.

There is a vulnerability in Roneous versions up to 2.1.5 that allows unauthenticated local file inclusion.

ITactics versions up to 1.0 are vulnerable to unauthenticated local file inclusion. An attacker can exploit this vulnerability to gain access to system files.

Versions of Tipsy up to 1.1 are vulnerable to unauthenticated local file inclusion. An attacker can exploit this vulnerability to gain access to system files.

There is an unauthenticated local file inclusion vulnerability in Resurs <= 1.3 versions.

There is an unauthenticated local file inclusion vulnerability in Orpheus versions <= 1.3.

There is an unauthenticated local file inclusion vulnerability in Spike versions <= 1.2.

Versions of Eros up to 1.3 are vulnerable to unauthenticated local file inclusion. An attacker can exploit this vulnerability to gain access to system files.

There is an unauthenticated local file inclusion vulnerability in Choreo versions <= 1.6.

WineShop versions up to 3.17 are vulnerable to unauthenticated local file inclusion. An attacker can exploit this vulnerability to gain access to system files.