CVE-2025-21039

CVE-2025-21039 affects Samsung S Assistant prior to version 9.3.2. The vulnerability stems from improper verification of intents in the SystemExceptionalBroadcastReceiver component, enabling local attackers to modify itinerary information. Impact details are described as local, with confidentiali...

SAMSUNG S Assistant 安全漏洞

SAMSUNG S Assistant is a cell phone application from the South Korean company Samsung SAMSUNG. It provides a cell phone management function. A security vulnerability exists in SAMSUNG S Assistant prior to version 9.3.2, which stems from insufficient validation of intent by...

PT-2025-35692

Name of the Vulnerable Software and Affected Versions S Assistant versions prior to 9.3.2 Description Improper verification of intent by SamsungExceptionalBroadcastReceiver allows local attackers to modify itinerary information. Recommendations Update S Assistant to version 9.3.2 or later...

SAMSUNG S Assistant 安全漏洞

SAMSUNG S Assistant is a cell phone application from the South Korean company Samsung SAMSUNG. It provides a cell phone management function. A security vulnerability exists in SAMSUNG S Assistant prior to version 9.3.2, which stems from insufficient validation of intent by...

CVE-2025-9823: Improper Neutralization of Input During Web Page Generation

SummaryA Cross-Site Scripting XSS vulnerability allows an attacker to execute arbitrary JavaScript in the context of another user’s session. This occurs because user-supplied input is reflected back in the server’s response without proper sanitization or escaping, potentially enabling malicious...

CVE-2025-21040: Undefined Security Weakness

Improper verification of intent by ExternalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information...

CVE-2025-21039: Undefined Security Weakness

Improper verification of intent by SystemExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information...

CVE-2025-21038: Undefined Security Weakness

Improper verification of intent by SamsungExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information...

PT-2025-35694

Name of the Vulnerable Software and Affected Versions S Assistant versions prior to 9.3.2 Description Improper verification of intent by ExternalBroadcastReceiver in S Assistant allows local attackers to modify itinerary information. Recommendations Update S Assistant to version 9.3.2 or later...

PT-2025-36614

Summary A Cross-Site Scripting XSS vulnerability allows an attacker to execute arbitrary JavaScript in the context of another user’s session. This occurs because user-supplied input is reflected back in the server’s response without proper sanitization or escaping, potentially enabling malicious...

USN-7730-1 kf5-messagelib vulnerabilities

Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jörg Schwenk discovered that PIM Messagelib could be made to leak the plaintext of S/MIME encrypted emails when retrieving external content in emails. Under certain...

Linux Distros Unpatched Vulnerability : CVE-2025-2545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES 3DES cryptographic algorithm is used to protect emails se...

CVE-2025-58058 vulnerabilities

Vulnerabilities for packages: xeol, podman, kubescape-operator, trivy, steampipe, zot, rancher-fleet, gitness, tflint, trufflehog, undock, nsc, k9s, zarf, terragrunt, guac, gptscript, opentofu, nuclei, filebrowser, grafana-alloy, gitleaks, envoy-gateway, trivy-operator, vcluster, terraform...

CVE-2025-54777

Uncaught exception issue exists in Multiple products in bizhub series. If a malformed file is imported as an S/MIME Email certificate, it may cause a denial-of-service issue that disable the Web Connection feature...

CVE-2025-54777: Uncaught Exception

Uncaught exception issue exists in Multiple products in bizhub series. If a malformed file is imported as an S/MIME Email certificate, it may cause a denial-of-service issue that disable the Web Connection feature...

USN-7703-4: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - GPIO subsystem; - GPU...

Linux Distros Unpatched Vulnerability : CVE-2023-45927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf. CVE-2023-45927 Note that Nessus relies on the presence of the package...

Linux Distros Unpatched Vulnerability : CVE-2020-18378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a...

Linux Distros Unpatched Vulnerability : CVE-2023-45929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixuptgetstr. CVE-2023-45929 Note that Nessus relies on the presence of the package...

Linux Distros Unpatched Vulnerability : CVE-2007-2243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to...