Lucene search
+L

19399 matches found

Cvelist
Cvelist
•added 2022/09/09 2:40 p.m.•41 views

CVE-2022-36870

Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...

5CVSS6.7AI score0.00176EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/09/09 2:39 p.m.•33 views

CVE-2022-39846

DLL hijacking vulnerability in Smart Switch PC prior to version 4.3.220833 allows attacker to execute arbitrary code...

6.2CVSS8.1AI score0.00229EPSS
SaveExploits0References1
CVE
CVE
•added 2022/09/09 2:39 p.m.•166 views

CVE-2022-39846

The vulnerability CVE-2022-39846 affects Samsung Smart Switch PC for Windows, where DLL hijacking can occur when a DLL is loaded without an absolute path. This can allow an attacker to execute arbitrary code on the target host. Affected software is Smart Switch PC versions prior to 4.3.22083_3. T...

7.8CVSS7.8AI score0.00229EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/09/09 12:00 a.m.•12 views

PT-2022-23675 · Samsung · Samsung Pay

Name of the Vulnerable Software and Affected Versions: Samsung Pay versions prior to 5.0.63 for KR and 5.1.47 for Global Description: The issue allows attackers to access files without permission via implicit Intent, exploiting a Pending Intent hijacking vulnerability in NotiCenterUtils...

6.5CVSS6.5AI score0.00173EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/09/09 12:00 a.m.•20 views

SAMSUNG Smart Switch PC 代码问题漏洞

SAMSUNG Smart Switch PC is a Windows software from Samsung South Korea. It is used for data transfer. SAMSUNG Smart Switch PC suffers from a DLL hijacking vulnerability that originates when a process attempts to load a DLL without specifying the absolute path to the DLL. An attacker can exploit...

7.8CVSS7.4AI score0.00229EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/09/09 12:00 a.m.•17 views

PT-2022-23674 · Samsung · Samsung Pay

Name of the Vulnerable Software and Affected Versions: Samsung Pay versions prior to 5.0.63 for KR and 5.1.47 for Global Description: The issue allows attackers to access files without permission via implicit Intent, exploiting a Pending Intent hijacking vulnerability in...

6.5CVSS6.5AI score0.00176EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/09/09 12:00 a.m.•12 views

PT-2022-23676 · Samsung · Samsung Pay

Name of the Vulnerable Software and Affected Versions: Samsung Pay versions prior to 5.0.63 for KR and 5.1.47 for Global Description: The issue allows attackers to access files without permission via implicit Intent, exploiting a Pending Intent hijacking vulnerability in SpayNotification...

6.5CVSS6.4AI score0.00173EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/09/09 12:00 a.m.•13 views

PT-2022-25035 · Samsung · Smart Switch Pc

Name of the Vulnerable Software and Affected Versions: Smart Switch PC versions prior to 4.3.22083 3 Description: The issue allows an attacker to execute arbitrary code through a DLL hijacking vulnerability. Recommendations: For versions prior to 4.3.22083 3, update to version 4.3.22083 3 or late...

7.8CVSS7.9AI score0.00229EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/09/09 12:00 a.m.•16 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices version 5.1.47 for international and version 5.0.63 for Korea, which stems from NotiCenterUtils in...

6.5CVSS6.5AI score0.00173EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/09/09 12:00 a.m.•12 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices version 5.1.47 for international and version 5.0.63 for Korea, which stems from SpayNotification in...

6.5CVSS6.5AI score0.00173EPSS
SaveExploits0References3
Malwarebytes
Malwarebytes
•added 2022/09/08 11:00 a.m.•79 views

Your HP Support Assistant needs an update!

HP has issued a new version of its HP Support Assistant tool. Users of HP Support Assistant versions earlier than 9.11 and Fusion versions earlier than 1.38.2601.0 are affected by a high severity vulnerability. According to HP it is possible for an attacker to exploit a dynamic-link library DLL...

8.8AI score0.02776EPSS
SaveExploits0
NVD
NVD
•added 2022/09/07 2:15 p.m.•41 views

CVE-2022-36271

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...

7.8CVSS0.00511EPSS
SaveExploits2References1
OSV
OSV
•added 2022/09/07 2:15 p.m.•15 views

CVE-2022-36271

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...

7.8CVSS5.8AI score0.00511EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2022/09/07 2:15 p.m.•5 views

CVE-2022-36271

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...

7.8CVSS7.1AI score0.00511EPSS
SaveExploits2References3
Prion
Prion
•added 2022/09/07 2:15 p.m.•27 views

Design/Logic Flaw

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...

4.4CVSS7.5AI score0.00511EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2022/09/07 1:46 p.m.•52 views

CVE-2022-36271

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...

7.8AI score0.00511EPSS
SaveExploits2References1
CVE
CVE
•added 2022/09/07 1:46 p.m.•87 views

CVE-2022-36271

CVE-2022-36271 affects Outbyte PC Repair Installation File 1.7.112.7856, where a DLL hijacking flaw (missing iertutil.dll) enables a local attacker to place a malicious DLL with the same name and obtain admin privileges. Affected component is the installation file; root cause is uncontrolled sear...

7.8CVSS7.5AI score0.00511EPSS
SaveExploits2References1Affected Software1
Hewlett-Packard
Hewlett-Packard
•added 2022/09/06 12:00 a.m.•59 views

Privilege escalation in HP Support Assistant

HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up. HP strives to...

7.8CVSS1.5AI score0.02776EPSS
SaveExploits0
CNVD
CNVD
•added 2022/09/02 12:00 a.m.•50 views

HUAWEI WS7200-10 hijacking vulnerability

HUAWEI WS7200-10 is a wireless router from Huawei China.A security vulnerability exists in the HUAWEI WS7200-10. An attacker exploits the vulnerability to cause message hijacking...

4.3CVSS2AI score0.00271EPSS
SaveExploits0References1
PyPA
PyPA
•added 2022/09/01 6:51 p.m.•11 views

PYSEC-2022-259

An attacker who obtains a JWT can arbitrarily forge its contents without knowing the secret key. Depending on the application, this may for example enable the attacker to spoof other user's identities, hijack their sessions, or bypass authentication...

9.1CVSS6.9AI score0.05342EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder