Skip to content
OpenAdvisories

Archive

27 September 2023

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Low 3.6

    Messaging - Gaining access to arbitrary content providers via QClipIntentReceiverActivity

    The vulnerability is that the Messaging ("com.android.mms") app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.android.mms.ui.QClipIntentReceiverActivity" activity. The attacker can abuse this functionality by lau…

  • Low 3.6

    Call management - Implicit activity intents disclose contact details and phone numbers

    he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as contact details and p…

  • Low 3.6

    Call management - Implicit intents disclose telephony data such as phone numbers, call states, contacts

    The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as ca…

  • Low 3.5

    Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Prot…

  • Low 3.1

    Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cybe…

  • Low 3.1

    Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cybe…

  • Low 3.5

    Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis …

  • Low 3.3

    Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Prote…

  • Low 2.2

    Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products ar…