CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2011-3901
https://notcve.org/view.php?id=CVE-2011-3901
Android SQLite Journal before 4.0.1 has an information disclosure vulnerability. Android SQLite Journal versión anterior a 4.0.1, presenta una vulnerabilidad de divulgación de información. • http://www.securityfocus.com/bid/53380 https://seclists.org/fulldisclosure/2012/May/19 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 2.4EPSS: 0%CPEs: 1EXPL: 0CVE-2011-2343
https://notcve.org/view.php?id=CVE-2011-2343
The Bluetooth stack in Android before 2.3.6 allows a physically proximate attacker to obtain contact information via an AT phonebook transfer. La pila del Bluetooth en Android versiones anteriores a 2.3.6, permite a un atacante físicamente próximo obtener información de contacto por medio de una transferencia de la agenda telefónica AT. • https://code.google.com/p/android/issues/detail?id=21347 https://deepsec.net/docs/Slides/2013/DeepSec_2013_Jaime_Sanchez_-_Building_The_First_Android_IDS_On_Network_Level.pdf • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.0EPSS: 1%CPEs: 1EXPL: 1CVE-2014-7224
https://notcve.org/view.php?id=CVE-2014-7224
A Code Execution vulnerability exists in Android prior to 4.4.0 related to the addJavascriptInterface method and the accessibility and accessibilityTraversal objects, which could let a remote malicious user execute arbitrary code. Se presenta una vulnerabilidad de ejecución de código en Android versiones anteriores a 4.4.0, relacionada con el método addJavascriptInterface y los objetos accessibility y accessibilityTraversal, lo que podría permitir a un usuario malicioso remoto ejecutar código arbitrario. • http://www.openwall.com/lists/oss-security/2014/10/02/20 https://daoyuan14.github.io/news/newattackvector.html https://exchange.xforce.ibmcloud.com/vulnerabilities/96833 https://www.securityfocus.com/bid/70222 • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 1CVE-2013-6792 – Google Android - Signature Verification Security Bypass
https://notcve.org/view.php?id=CVE-2013-6792
Google Android prior to 4.4 has an APK Signature Security Bypass Vulnerability Google Android versiones anteriores a 4.4, presenta una Vulnerabilidad de Omisión de Seguridad de Firma APK. • https://www.exploit-db.com/exploits/38821 http://www.securityfocus.com/bid/64529 •
CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 1CVE-2016-5346
https://notcve.org/view.php?id=CVE-2016-5346
An Information Disclosure vulnerability exists in the Google Pixel/Pixel SL Qualcomm Avtimer Driver due to a NULL pointer dereference when processing an accept system call by the user process on AF_MSM_IPC sockets, which could let a local malicious user obtain sensitive information (Android Bug ID A-32551280). Existe una vulnerabilidad de divulgación de información en el Google Pixel/Pixel SL Qualcomm Avtimer Driver debido a una desreferencia del puntero NULL al procesar una llamada de sistema de aceptación para el proceso del usuario en los sockets AF_MSM_IPC, lo que podría permitir a un usuario malicioso local obtener información confidencial (ID de Bug de Android A -32551280). • http://www.securityfocus.com/bid/97371 http://www.securitytracker.com/id/1038201 https://github.com/ele7enxxh/poc-exp/tree/master/CVE-2016-5346 https://source.android.com/security/bulletin/2017-04-01.html https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=6298a474322fb2182f795a622b2faa64abfd8474 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •