cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2019-15412,https://securityvulnerability.io/vulnerability/CVE-2019-15412,,"The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW_Z01M/ASUS_Z01M_1:7.1.1/NMF26F/WW_71.50.395.57_20180913:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000020, versionName=7.0.0.4_170901) that allows other pre-installed apps to perform command execution via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.",Asus,Zenfone 4 Selfie Firmware,7.8,HIGH,0.0004400000034365803,false,false,false,false,,false,false,2019-11-14T16:26:20.000Z,0 CVE-2019-15406,https://securityvulnerability.io/vulnerability/CVE-2019-15406,,"The Asus ASUS_X00LD_3 Android device with a build fingerprint of asus/WW_Phone/ASUS_X00LD_3:7.1.1/NMF26F/14.0400.1806.203-20180720:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000020, versionName=7.0.0.4_170901) that allows other pre-installed apps to perform command execution via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.",Asus,Zenfone 4 Selfie Firmware,7.8,HIGH,0.0004400000034365803,false,false,false,false,,false,false,2019-11-14T16:26:12.000Z,0 CVE-2019-15398,https://securityvulnerability.io/vulnerability/CVE-2019-15398,,"The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW_Z01M/ASUS_Z01M_1:7.1.1/NMF26F/WW_user_11.40.208.77_20170922:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000015, versionName=7.0.0.3_161222) that allows other pre-installed apps to perform command execution via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.",Asus,Zenfone 4 Selfie Firmware,7.8,HIGH,0.0004400000034365803,false,false,false,false,,false,false,2019-11-14T16:26:00.000Z,0 CVE-2019-15392,https://securityvulnerability.io/vulnerability/CVE-2019-15392,,"The Asus ZenFone 4 Selfie Android device with a build fingerprint of Android/sdm660_64/sdm660_64:8.1.0/OPM1/14.2016.1802.247-20180419:user/release-keys contains a pre-installed app with a package name of com.log.logservice app (versionCode=1, versionName=1) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.",Asus,Zenfone 4 Selfie Firmware,5.5,MEDIUM,0.0004400000034365803,false,false,false,false,,false,false,2019-11-14T16:25:52.000Z,0 CVE-2019-15391,https://securityvulnerability.io/vulnerability/CVE-2019-15391,,"The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW_Phone/ASUS_X00LD_1:8.1.0/OPM1.171019.011/15.0400.1809.405-0:user/release-keys contains a pre-installed app with a package name of com.log.logservice app (versionCode=1, versionName=1) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.",Asus,Zenfone 4 Selfie Firmware,5.5,MEDIUM,0.0004400000034365803,false,false,false,false,,false,false,2019-11-14T16:25:50.000Z,0