SAMSUNG Mobile devices Knoxguard 安全漏洞

Samsung Knoxguard is an open source Android platform-based security solution from Samsung Samsung in South Korea that can enhance security across the board through a combination of physical means and software systems, while being perfectly compatible with the Android and Google ecosystems, bringi...

CVE-2022-33702

CVE-2022-33702 affects Samsung Knoxguard; an improper authorization flaw allows a local attacker to disable the keyguard and bypass the Knoxguard lock via a factory reset on Knoxguard versions prior to SMR Jul-2022 Release 1. The issue is documented across multiple sources (NVD, Red Hat, CNVD, PR...

CVE-2022-33702

Improper authorization vulnerability in Knoxguard prior to SMR Jul-2022 Release 1 allows local attacker to disable keyguard and bypass Knoxguard lock by factory reset...

PT-2022-21818 · Samsung · Knox Guard

Name of the Vulnerable Software and Affected Versions: Knoxguard versions prior to SMR Jul-2022 Release 1 Description: The issue is related to an improper authorization vulnerability. It allows a local attacker to disable the keyguard and bypass the Knoxguard lock by performing a factory reset...

CVE-2021-41042

In Eclipse Lyo versions 1.0.0 to 4.1.0, a TransformerFactory is initialized with the defaults that do not restrict DTD loading when working with RDF/XML. This allows an attacker to cause an external DTD to be retrieved...

[PNM-005] Reentrancy of function sell

Lines of code Vulnerability details Description In function chargeFee, a potential reetrancy can be triggered by the factory. Since function sell invokes chargeFee in the middle of its function body, it potentially impacts the calculation, e.g., the totalSupply would be incorrect since the tokens...

Malicious code in usaa-axios-factory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55764e17e8e75cf7f02547f828d98aae791cd34ba49a468a9650dfe1e9e57ec6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6829 Malicious code in usaa-axios-factory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55764e17e8e75cf7f02547f828d98aae791cd34ba49a468a9650dfe1e9e57ec6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-datafactory-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afc9578f0a9b9c2a81182d4350c4538a9b3478ed151ac3f4c89f19dc1252b004 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Update now!  Microsoft patches Follina, and many other security updates

The June 2022 Patch Tuesday may go down in history as the day that Follina got patched, but there was a host of other important updates. And not just from Microsoft. Many other software vendors follow the pattern of monthly updates set by the people in Redmond. Microsoft Microsoft released update...

CVE-2022-20125

In GBoard, there is a possible way to bypass factory reset protections due to a sandbox escape. This could lead to local escalation of privilege if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

CVE-2022-20125

In GBoard, there is a possible way to bypass factory reset protections due to a sandbox escape. This could lead to local escalation of privilege if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

CVE-2022-20125

Technical details about CVE-2022-20125 are not publicly available in the provided documents. Monitor for updates.

zhanwangwipesfactory.com Cross Site Scripting vulnerability OBB-2647267

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ASB-A-194402515

In GBoard, there is a possible way to bypass factory reset protections due to a sandbox escape. This could lead to local escalation of privilege if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation...

ai.grakn:grakn-dist (>=0.7.0 <=0.16.0), ai.grakn:grakn-test (=0.10.0) +1853 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (>=0.6.0 <=6.8.13)

org.elasticsearch:elasticsearch MAVEN version =0.6.0, =0.7.0, =0.6.1, =0.11.0, =0.3.0, =1.0.1, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.2.1 - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-starter =5.2.0 and more Source cves: CVE-2020-7021 Source advisory: OSV:GHSA-CQGV-256R-M9R8...

ai.grakn:grakn-dist (>=0.7.0 <=0.16.0), ai.grakn:grakn-test (=0.10.0) +1866 more potentially affected by CVE-2019-7614 via org.elasticsearch:elasticsearch (>=0.6.0 <=6.8.19)

org.elasticsearch:elasticsearch MAVEN version =0.6.0, =0.7.0, =0.6.1, =0.11.0, =0.3.0, =1.0.1, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.2.1 - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-starter =5.2.0 and more Source cves: CVE-2019-7614 Source advisory: OSV:GHSA-JQM6-M3J3-8GG9...

CVE-2020-14496 Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues

Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information ...

CVE-2020-14496 Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues

Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information ...

CVE-2020-14496

CVE-2020-14496 is a permissions-based vulnerability in Mitsubishi Electric Factory Automation Engineering Software products. In affected products (e.g., CPU Module Logging Configuration Tool, CW/FR Configurators, EZSocket, GT Designer3, GX Works2/3, MELSOFT tools, Data Transfer, etc.), incorrect ...