87 matches found
SAMSUNG Mobile devices security vulnerability
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to version 3.4.10, which stems from improper authorization in the PushClientProvider o...
CVE-2023-5523
Execution of downloaded content flaw in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution...
CVE-2023-30706
Improper authorization in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows attacker to read arbitrary file with system privilege...
CVE-2023-1765
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Akbim Computer Panon allows SQL Injection. This issue affects Panon: before 1.0.2...
SUSE CVE-2018-16391
Several buffer overflows when handling responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...
CVE-2022-43762
Lack of verification in B&R APROL Tbase server versions R 4.2-07 may lead to memory leaks when receiving messages...
UBUNTU-CVE-2021-40695
It was possible for a student to view their quiz grade before it had been released, using a quiz web service...
PT-2022-21817 · Samsung · Knoxcustommanagerservice
Name of the Vulnerable Software and Affected Versions: KnoxCustomManagerService versions prior to SMR Jul-2022 Release 1 Description: The issue is related to an improper access control vulnerability. It allows an attacker to call the PowerManaer.goToSleep method, which is protected by system...
CVE-2022-30724
Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionCompleted function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device...
CVE-2022-30711
Improper validation vulnerability in FeedsInfo prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities...
CVE-2022-30719
Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash...
CVE-2022-27835
Improper boundary check in UWB firmware prior to SMR Apr-2022 Release 1 allows arbitrary memory write...
CVE-2022-22292
Unprotected dynamic receiver in Telecom prior to SMR Feb-2022 Release 1 allows untrusted applications to launch arbitrary activity...
PT-2022-11304 · Alt Linux · Alt Linux
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows a student to view their quiz grade before it has been released, utilizing a quiz web service. No information is provided about the...
Open Policy Agent 安全漏洞
Open Policy Agent is an open source, general-purpose policy engine that enables uniform, context-aware policy enforcement across the stack. A security vulnerability exists in Open Policy Agent OPA Gatekeeper prior to 3.7.0, which stems from an error handling concurrency that sometimes leads to...
pajbot 跨站请求伪造漏洞
pajbot is a software application. A twitch chatbot. A cross-site request forgery vulnerability exists in versions prior to Pajbot 1.52, which stems from a WEB application that does not adequately validate that a request is coming from a trusted user. An attacker could exploit the vulnerability to...
CVE-2019-3733
The vulnerability CVE-2019-3733 affects RSA BSAFE Crypto-C Micro Edition all versions before 4.1.4, due to three Improper Clearing of Heap Memory Before Release (Heap Inspection) issues. This could allow a remote attacker to extract sensitive data left in memory. Mitigation: upgrade to 4.1.4 or l...
opensc: Buffer overflow handling string concatention in tools/util.c:util_acl_to_str()
A buffer overflow when handling string concatenation in utilacltostr in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...
Teltonika RUT9XX Authentication Vulnerability
Teltonika RUT9XX LuCI is a LET router product from Teltonika Lithuania. A security vulnerability exists in /cgi-bin/luci in Teltonika RTU9XX R00.05.00.5 prior to version R31.04.89. An attacker could exploit this vulnerability to crack user passwords...