Vendor
vivo
26 known vulnerabilities.
Products
17 results · Clear filters · Feed
-
Medium 5.1
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM…
-
Medium 5.3
The connection confirmation pop-up of a specific feature in the PcSuite can be bypassed.
-
Medium 6.9
The authentication mechanism for a specific feature in the EasyShare module contains a vulnerability. If specific condi…
-
Medium 5.1
Insufficient protection mechanisms in the Health Module may lead to partial information disclosure.
-
Medium 5.1
The wallet has an authentication bypass vulnerability that allows access to specific pages.
-
Medium 4.8
SystemUI component protection settings vulnerability
SystemUI has an incorrect component protection setting, which allows access to specific information.
-
Medium 6.3
MinigameCenter information leakage vulnerability
The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage.
-
Medium 6.3
MinigameCenter module information leakage vulnerability
The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage.
-
Medium 6.3
Health information leakage vulnerability
The health module has insufficient restrictions on loading URLs, which may lead to some information leakage.
-
Medium 5.5
Information disclosure vulnerability in Alarm clock module
Some parameters of the alarm clock module are improperly stored, leaking some sensitive information.
-
Medium 5.9
Information disclosure vulnerability in Weather module
Some parameters of the weather module are improperly stored, leaking some sensitive information.
-
Medium 6.3
Sensitive information leakage vulnerability in wifi module
The wifi module exposes the interface and has improper permission control, leaking sensitive information about the device.
-
Medium 6.4
When using special mode to connect to enterprise wifi, certain options are not properly configured and attackers can pr…
-
Medium 4.8
Framework Information Disclosure Vulnerability
Improper control of framework service permissions with possibility of some sensitive device information leakage.
-
Medium 5.6
Security Advisory | PendingIntent hijacking vulnerability in Framework Services
The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions.
-
Medium 5.5
Broken Access Control Vulnerability in Jovi Smart Scene
The attacker can access the sensitive information stored within the jovi Smart Scene module by entering carefully constructed commands without requesting permission.
-
Medium 5.5
The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which …