PT-2023-14977 · Intel · Intel Smart Campus Android Application

Name of the Vulnerable Software and Affected Versions: IntelR Smart Campus Android application versions prior to 9.9 Description: The issue concerns uncontrolled resource consumption, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations:...

Intel Retail Edge Mobile Android application security vulnerabilities

Intel Retail Edge Mobile Android application is a Retail Edge Mobile Android application from Intel Corporation USA. A security vulnerability exists in versions prior to Intel Retail Edge Mobile Android application 3.0.301126-RELEASE that stems from incorrect input validation. An attacker could...

Intel® Retail Edge Mobile App Advisory

Summary: Potential security vulnerabilities in the Intel® Retail Edge Mobile application may allow escalation of privilege, denial of service or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-41690...

Intel® Smart Campus Android App Advisory

Summary: A potential security vulnerability in the Intel® Smart Campus Android application may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-46645 Description: Uncontrolled resource consumption in the...

Input validation

Improper export of android application components vulnerability in ImagePreviewActivity in Call Settings to SMR May-2023 Release 1 allows physical attackers to access some media data stored in sandbox...

CVE-2023-21486

CVE-2023-21486 concerns an improper export of Android components in ImagePreviewActivity within Samsung Call Settings, enabling a physical attacker to access certain media data in sandbox. The issue is tied to specific Samsung SMR May-2023 Release 1 updates; remediation is provided via the May-20...

CVE-2023-21485

CVE-2023-21485 describes an issue in Android/Samsung devices where the vulnerability occurs in the VideoPreviewActivity within Call Settings, allowing a physical attacker to access some media data stored in the device sandbox. The core problem is an improper export of Android application componen...

CVE-2023-21485

Improper export of android application components vulnerability in VideoPreviewActivity in Call Settings to SMR May-2023 Release 1 allows physical attackers to access some media data stored in sandbox...

CVE-2023-21485

Improper export of android application components vulnerability in VideoPreviewActivity in Call Settings to SMR May-2023 Release 1 allows physical attackers to access some media data stored in sandbox...

CVE-2023-21486

Improper export of android application components vulnerability in ImagePreviewActivity in Call Settings to SMR May-2023 Release 1 allows physical attackers to access some media data stored in sandbox...

CVE-2022-48186

A certificate validation vulnerability exists in the Baiying Android application which could lead to information disclosure...

Information disclosure

A certificate validation vulnerability exists in the Baiying Android application which could lead to information disclosure...

CVE-2022-48186

Summary: CVE-2022-48186 pertains to a certificate validation vulnerability in the Baiying Android application, exposing information disclosure risk. The NVD entry assigns CVSS v3.1 base score 7.5 (HIGH) with attack vector Network, attack complexity Low, privileges required None, user interaction ...

PT-2023-15606 · Unknown · Baiying Android Application

Name of the Vulnerable Software and Affected Versions: Baiying Android application affected versions not specified Description: A certificate validation issue exists in the application, potentially leading to information disclosure. Recommendations: At the moment, there is no information about a...

DEBIAN-CVE-2023-28999

Nextcloud is an open-source productivity platform. In Nextcloud Desktop client 3.0.0 until 3.8.0, Nextcloud Android app 3.13.0 until 3.25.0, and Nextcloud iOS app 3.0.5 until 4.8.0, a malicious server administrator can gain full access to an end-to-end encrypted folder. They can decrypt files,...

CVE-2023-22702 WordPress WPMobile.App — Android and iOS Mobile Application Plugin <= 11.13 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Cross-Site Scripting XSS vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Application plugin = 11.13 versions...

CVE-2022-45637

An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 service via insecure expiry mechanism...

PT-2023-1786 · Microsoft · Onedrive

Name of the Vulnerable Software and Affected Versions: Microsoft OneDrive for Android affected versions not specified Description: The issue is related to a lack of protection for service data in the file hosting service. Exploitation of this issue may allow an attacker to access protected...

Shein's Android App Caught Transmitting Clipboard Data to Remote Servers

An older version of Shein's Android application suffered from a bug that periodically captured and transmitted clipboard contents to a remote server. The Microsoft 365 Defender Research Team said it discovered the problem in version 7.9.2 of the app that was released on December 16, 2021. The iss...

CVE-2022-34909

An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It allows SQL Injection, by which an attacker can bypass authentication and retrieve data that is stored in the database...