7474 matches found
CVE-2022-22530: Undefined Security Weakness
The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to inject dangerous content or malicious code which could result in critical information being...
CVE-2022-22289
Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive information...
CVE-2022-22289
Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive information...
CVE-2022-22289
Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive information...
Improper access control
Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive information...
Information disclosure
A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R11.0 and 12.3.02.1000 in Android S12.0 allows attackers to execute privileged action by hijacking and modifying the intent...
CVE-2021-34087
In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver can be used for clickjacking. This includes the settings page...
CVE-2021-34086
In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver hosts APIs vulnerable to CSRF. They do not verify incoming requests...
CVE-2020-9059
Z-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible to uncontrolled resource consumption leading to battery exhaustion. As an example, the Schlage BE468 version 3.42 door lock is vulnerable and fails open at a low battery level...
CVE-2020-9059
Z-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible to uncontrolled resource consumption leading to battery exhaustion. As an example, the Schlage BE468 version 3.42 door lock is vulnerable and fails open at a low battery level...
PT-2022-10320
Name of the Vulnerable Software and Affected Versions Ultimaker S3 3D printer versions through 6.3 Ultimaker S5 3D printer versions through 6.3 Ultimaker 3 3D printer S-line versions through 6.3 Ultimaker 3 versions through 5.2.16 Description The local webserver in the affected 3D printers hosts...
Samsung S Assistant 授权问题漏洞
Samsung S Assistant is a cell phone application from Samsung South Korea. It provides a cell phone management feature. A security vulnerability exists in S Assistant prior to version 7.5 that allows an attacker to remotely access sensitive information...
Silicon Labs Z-Wave Chipsets 资源管理错误漏洞
Silicon Labs Z-Wave Chipsets are a type of chipset in the smart home ecosystem from Silicon Labs, USA. The Silicon Labs Z-Wave Chipsets suffers from a resource management error vulnerability that stems from the fact that Z-Wave devices are based on the Silicon Labs 500 series chipsets, which use...
Silicon Labs 700 数据伪造问题漏洞
Silicon Labs 700 is a family of chips from Silicon Labs, Inc. The Silicon Labs 700 suffers from a data forgery vulnerability that stems from the presence of insufficient authentication or encryption in the Silicon Labs 700 series chips using S2. An attacker could exploit the vulnerability by...
PT-2022-10321
Name of the Vulnerable Software and Affected Versions Ultimaker S3 3D printer versions prior to 6.3 Ultimaker S5 3D printer versions prior to 6.3 Ultimaker 3 3D printer S-line versions prior to 6.3 Ultimaker 3 3D printer versions prior to 5.2.16 Description The issue allows the local webserver to...
CVE-2022-22289
Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive information...
CVE-2022-22289
CVE-2022-22289 describes an improper access control vulnerability in the Samsung S Assistant prior to version 7.5. The accepted details across multiple sources confirm that the issue allows an attacker to remotely obtain sensitive information . The NVD metrics indicate a network-remote vector wit...
CVE-2022-22285: Improper Control of Generation of Code
A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R11.0 and 12.3.02.1000 in Android S12.0 allows attackers to execute privileged action by hijacking and modifying the intent...
PT-2022-15333
Name of the Vulnerable Software and Affected Versions S Assistant versions prior to 7.5 Description The issue is related to improper access control, allowing an attacker to remotely obtain sensitive information. Recommendations For versions prior to 7.5, update to version 7.5 or later to resolve...