CVE-2022-36831

CVE-2022-36831 affects Samsung Notes, specifically UriFileUtils in versions prior to 4.3.14.39. The root cause is a path traversal vulnerability that allows an attacker with Samsung Notes permissions to access some files on the device (local attack vector). Impact is exposure of confidential data...

PT-2022-23639 · Samsung · Samsung Internet Browser

Name of the Vulnerable Software and Affected Versions: Samsung Internet Browser versions prior to 17.0.7.34 Description: The issue allows attackers to access arbitrary files through an Implicit Intent hijacking vulnerability. Recommendations: For versions prior to 17.0.7.34, update to version...

PT-2022-23634 · Samsung · Charm

Name of the Vulnerable Software and Affected Versions: Charm by Samsung versions prior to 1.2.3 Description: The issue allows local attackers to access files without permission via implicit intent, exploiting a PendingIntent hijacking vulnerability in the cancelAlarmManager function...

SAMSUNG Internet Browser 安全漏洞

SAMSUNG Internet Browser is a Samsung Browser from Samsung South Korea. A security vulnerability exists in SAMSUNG Internet Browser versions prior to 17.0.7.34, which stems from an implicit Intent hijacking vulnerability that can be exploited by an attacker to access arbitrary files...

CVE-2022-36835: Exposure of Sensitive Information to an Unauthorized Actor

Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files...

CVE-2022-31662: Improper Limitation of a Pathname to a Restricted Directory

VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. A malicious actor with network access may be able to access arbitrary files...

CVE-2022-36829: Use of Implicit Intent for Sensitive Communication

PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent...

CVE-2022-36831: Improper Limitation of a Pathname to a Restricted Directory

Path traversal vulnerability in UriFileUtils of Samsung Notes prior to version 4.3.14.39 allows attacker to access some file as Samsung Notes permission...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices from the South Korean company Samsung, including cell phones, tablets, and more. A security vulnerability exists in SAMSUNG Mobile devices Charm versions prior to 1.2.3, which stems from a PendingIntent hijacking vulnerability in...

PT-2022-23633 · Samsung · Charm

Name of the Vulnerable Software and Affected Versions: Charm by Samsung versions prior to 1.2.3 Description: The issue allows local attackers to access files without permission via implicit intent, exploiting a PendingIntent hijacking vulnerability in the releaseAlarm function. Recommendations: F...

CVE-2022-33721: Improper Control of Generation of Code

A vulnerability using PendingIntent in DeX for PC prior to SMR Aug-2022 Release 1 allows attackers to access files with system privilege...

PT-2022-21838 · Samsung · Dex For Pc

Name of the Vulnerable Software and Affected Versions: DeX for PC versions prior to SMR Aug-2022 Release 1 Description: A vulnerability using PendingIntent in DeX for PC allows attackers to access files with system privilege. Recommendations: For DeX for PC versions prior to SMR Aug-2022 Release ...

PT-2022-21832 · Samsung · Launcherprovider

Name of the Vulnerable Software and Affected Versions: LauncherProvider versions prior to SMR Aug-2022 Release 1 Description: The issue is related to improper access control and path traversal in LauncherProvider, allowing a local attacker to access files of One UI. Recommendations: For versions...

SAMSUNG Mobile devices 路径遍历漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices UriFileUtils versions prior to 4.3.14.39, which stems from a path traversal vulnerability in...

CVE-2022-36830: Use of Implicit Intent for Sensitive Communication

PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent...

CVE-2022-31793

dorequest in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and...

CVE-2022-35216

OMICARD EDM’s mail image relay function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to by-pass authentication and access arbitrary system files...

PT-2022-20938 · Arris · Bgw320 +5

Name of the Vulnerable Software and Affected Versions: muhttpd versions prior to 1.1.7 Description: The issue allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first...

ITPison OMICARD EDM 路径遍历漏洞

ITPison OMICARD EDM is a high-speed email newsletter EDM marketing and distribution system from ITPison China. A security vulnerability exists in ITPison OMICARD EDM versions v5.8 to v6.0. The vulnerability stems from a path traversal in OMICARD EDM's Mail Image Forwarding feature, which can be...

CVE-2022-35216: Improper Limitation of a Pathname to a Restricted Directory

OMICARD EDM’s mail image relay function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to by-pass authentication and access arbitrary system files...