PT-2023-14617 · Wago · 751-9301 Firmware +13

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A CORS misconfiguration in the web-based management allows a malicious third-party web server to misuse basic information pages, potentially leading to the disclosure of device...

PT-2023-1496 · X.Org +10 · X.Org Server +10

Name of the Vulnerable Software and Affected Versions: X.Org Server versions prior to 21.1.7 Description: A vulnerability was found in X.Org due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo and ProcXkbGetDeviceInfo to read and write into freed...

CVE-2023-22601

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-330: Use of Insufficiently Random Values. They do not properly randomize MQTT ClientID parameters. An unauthorized user could calculate this...

CVE-2022-38377

An improper access control vulnerability CWE-284 in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11 and FortiAnalyzer 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.0 through 6.0.12 may allow a remote and...

CVE-2022-39886

Improper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022 Release 1 allows local attacker to access Device information...

CVE-2022-39889

Improper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and 2.2.12.22101351 allows attackers to access wearable device information...

CVE-2022-39885

Improper access control vulnerability in BootCompletedReceiverCMCC in DeviceManagement prior to SMR Nov-2022 Release 1 allows local attacker to access to Device information...

CVE-2022-39886

Improper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022 Release 1 allows local attacker to access Device information...

Improper access control

Improper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022 Release 1 allows local attacker to access Device information...

Improper access control

Improper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and 2.2.12.22101351 allows attackers to access wearable device information...

Improper access control

Improper access control vulnerability in BootCompletedReceiverCMCC in DeviceManagement prior to SMR Nov-2022 Release 1 allows local attacker to access to Device information...

CVE-2022-39885

Improper access control vulnerability in BootCompletedReceiverCMCC in DeviceManagement prior to SMR Nov-2022 Release 1 allows local attacker to access to Device information...

CVE-2022-39886

Improper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022 Release 1 allows local attacker to access Device information...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2022 Release 1, which stems from an improper access control vulnerability in...

CVE-2022-39886

CVE-2022-39886 concerns an improper access control vulnerability in the IpcRxServiceModeBigDataInfo component of RIL, prior to Samsung SMR Nov-2022 Release 1. A local attacker could access device information due to the access-control weakness in RIL. Affected: Samsung devices running RIL before t...

PT-2022-25081 · Samsung · Galaxywatch4Plugin

Name of the Vulnerable Software and Affected Versions: GalaxyWatch4Plugin versions prior to 2.2.11.22101351 and 2.2.12.22101351 Description: The issue is related to improper access control, allowing attackers to access wearable device information. Recommendations: For versions prior to...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2022 Release 1, which originates from an improper access control vulnerability in...

CVE-2022-39886

Improper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022 Release 1 allows local attacker to access Device information...

PT-2022-25079 · Ril · Ril

Name of the Vulnerable Software and Affected Versions: RIL versions prior to SMR Nov-2022 Release 1 Description: The issue is related to an improper access control vulnerability in the IpcRxServiceModeBigDataInfo component of RIL. This vulnerability allows a local attacker to access device...

CVE-2022-39885

Improper access control vulnerability in BootCompletedReceiverCMCC in DeviceManagement prior to SMR Nov-2022 Release 1 allows local attacker to access to Device information...