CVE-2023-21439

Improper input validation vulnerability in UwbDataTxStatusEvent prior to SMR Feb-2023 Release 1 allows attackers to launch certain activities...

PT-2023-18199 · Samsung · Bixby Vision

Name of the Vulnerable Software and Affected Versions: Bixby Vision versions prior to 3.7.70.17 Description: The issue is related to improper input validation, which allows an attacker to access Bixby Vision data. Recommendations: For versions prior to 3.7.70.17, update to version 3.7.70.17 or...

CVE-2023-21428

CVE-2023-21428 affects TelephonyUI prior to SMR Jan-2023 Release 1. The issue is due to improper input validation, allowing an attacker to configure Preferred Call. The patch reportedly removes unused code. Impact per available data includes local access with low to moderate severity (I/L, A/N). ...

PT-2023-18213

Name of the Vulnerable Software and Affected Versions MyFiles versions prior to 12.2.09 MyFiles version 13.1.03.501 MyFiles version 14.1.00.422 Description The issue is related to improper input validation, allowing a local attacker to access data of MyFiles. This could potentially lead to...

CVE-2022-34146: Improper Input Validation

Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation...

CVE-2023-21431

Improper input validation in Bixby Vision prior to version 3.7.70.17 allows attacker to access data of Bixby Vision...

CVE-2023-21439: Improper Input Validation

Improper input validation vulnerability in UwbDataTxStatusEvent prior to SMR Feb-2023 Release 1 allows attackers to launch certain activities...

CVE-2023-21446: Improper Input Validation

Improper input validation in MyFiles prior to version 12.2.09 in Android R11, 13.1.03.501 in Android S 12 and 14.1.00.422 in Android T13 allows local attacker to access data of MyFiles...

CVE-2023-21431: Improper Input Validation

Improper input validation in Bixby Vision prior to version 3.7.70.17 allows attacker to access data of Bixby Vision...

CVE-2022-40502: Improper Input Validation

Transient DOS due to improper input validation in WLAN Host...

CVE-2023-21428: Improper Input Validation

Improper input validation vulnerability in TelephonyUI prior to SMR Jan-2023 Release 1 allows attackers to configure Preferred Call. The patch removes unused code...

CVE-2023-21434

Samsung Galaxy Store for Android versions prior to 4.5.49.8 is affected by CVE-2023-21434 due to improper input validation. The issue relates to how the app limits domains that can be launched in a WebView, potentially allowing a local attacker to bypass the URL filter and navigate to a domain un...

CVE-2022-48297: Improper Validation of Specified Quantity in Input

The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access...

CVE-2023-21434: Improper Input Validation

Improper input validation vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to execute JavaScript by launching a web page...

CVE-2023-21439

CVE-2023-21439 concerns an improper input validation vulnerability in the Samsung UwbDataTxStatusEvent component. The issue affects Samsung Mobile devices prior to the SMR Feb-2023 Release 1, enabling attackers to launch certain activities due to malformed input handling. Public documents in conn...

CVE-2022-45090 SQL Injection in Smartpower Web

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. This issue affects Smartpower Web: before 23.01.01...

CVE-2022-45090

The CVE-2022-45090 entry concerns an Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web, enabling SQL Injection. Multiple sources (Red Hat, NVD, CNNVD/CVE record) describe that Smartpower Web versions before 23.01.01 are affected due to insufficient in...

CVE-2022-45089 SQL Injection in Smartpower Web

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. This issue affects Smartpower Web: before 23.01.01...

CVE-2022-45089

CVE-2022-45089 applies to Smartpower Web from Group Arge Energy and Control Systems, with versions prior to 23.01.01 vulnerable due to improper input validation that enables SQL Injection (high impact, network exposure). Mitigation: upgrade to 23.01.01 or later (per PT-2023-14597 and vendor advis...

CVE-2022-45089 SQL Injection in Smartpower Web

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. This issue affects Smartpower Web: before 23.01.01...