CVE-2024-34583

Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier...

CVE-2024-34583

CVE-2024-34583 concerns improper access control in a system property on Samsung Mobile devices prior to SMR Jul-2024 Release 1. A local attacker could obtain a device identifier (confidentiality impact low). Connected sources indicate updates to fix the issue: Samsung/Android security updates (SM...

CVE-2024-34583

Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier...

CVE-2024-20895

CVE-2024-20895 affects Samsung Mobile devices’ Dar service, where improper access control allows a local attacker to bypass restrictions on calling SDP features. The issue is tied to Dar service prior to SMR Jul-2024 Release 1 and has been addressed by updating to SMR Jul-2024 Release 1 or later....

CVE-2024-20895

Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for calling SDP features...

CVE-2024-20891

Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities...

CVE-2024-20891

Affected software: SystemUI on Samsung Android devices prior to SMR Jul-2024 Release 1.Vulnerability: improper access control in launchFullscreenIntent; local attacker can launch privileged activities.Root cause/scope: access-control flaw in SystemUI component leading to privilege elevation.Impac...

CVE-2024-20891

Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities...

CVE-2024-20888

Improper access control in OneUIHome prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

CVE-2024-20888

Improper access control in OneUIHome prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Jul-2024 Release 1 prior to version 1, which stems from an improper access control issue...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices prior to SMR Jul-2024 Release 1, which stems from an improper access control issue in the system property. A local...

Aimeos Security Breach

Aimeos is an open source e-commerce framework for online stores from Aimeos Open Source. Aimeos has a security vulnerability that stems from improper access control in ai-admin-jsonadm, which allows an attacker to remove the administrator group and language environment configuration from the Aime...

aimeos/ai-admin-graphql improper access control vulnerability allows editors to manage own services

aimeos/ai-admin-graphql is the Aimeos GraphQL API admin interface. Starting in version 2022.04.1 and prior to versions 2022.10.10, 2023.10.6, and 2024.4.2, improper access control allows a editors to manage own services via GraphQL API which isn't allowed in the JQAdm front end. Versions...

PT-2024-18808 · Unknown · Dar Service

Name of the Vulnerable Software and Affected Versions: Dar service versions prior to SMR Jul-2024 Release 1 Description: The issue is related to improper access control in the Dar service, allowing local attackers to bypass restrictions for calling SDP features. Recommendations: For versions prio...

PT-2024-18800 · Samsung · One Ui Home

Name of the Vulnerable Software and Affected Versions: OneUIHome versions prior to SMR Jul-2024 Release 1 Description: The issue is related to improper access control, allowing local attackers to launch privileged activities. User interaction is required to trigger this issue. Recommendations: Fo...

aimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records

Improper access control allows editors to remove admin group and locale configuration in Aimeos backend...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to SMR Jul-2024 Release 1, which stems from an improper access control issue with the...

Aimeos Security Breach

Aimeos is an open source e-commerce framework for online stores from Aimeos Open Source. Aimeos has a security vulnerability that stems from improper access control in ai-admin-graphql, which allows an attacker to modify and take over the administrator account on the backend. The affected version...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices prior to SMR Jul-2024 Release 1, which stems from an improper access control issue in clickAdapterItem of SystemUI...