CVE-2022-48392
https://notcve.org/view.php?id=CVE-2022-48392
In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. • https://www.unisoc.com/en_us/secy/announcementDetail/1664822361414762498 • CWE-862: Missing Authorization •
CVE-2022-48391
https://notcve.org/view.php?id=CVE-2022-48391
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. • https://www.unisoc.com/en_us/secy/announcementDetail/1664822361414762498 • CWE-862: Missing Authorization •
CVE-2022-48390
https://notcve.org/view.php?id=CVE-2022-48390
In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. • https://www.unisoc.com/en_us/secy/announcementDetail/1664822361414762498 • CWE-862: Missing Authorization •
CVE-2023-33740
https://notcve.org/view.php?id=CVE-2023-33740
Incorrect access control in luowice v3.5.18 allows attackers to access cloud source code information via modification fo the Verify parameter in a warning message. • https://github.com/zzh-newlearner/record/blob/main/luowice_warning.md •
CVE-2023-33741
https://notcve.org/view.php?id=CVE-2023-33741
Macrovideo v380pro v1.4.97 shares the device id and password when sharing the device. • https://github.com/zzh-newlearner/record/blob/main/macrovideo_share.md •