Lucene search
+L

65 matches found

OSV
OSV
•added 2023/04/14 12:15 p.m.•12 views

CVE-2022-47027

Timmystudios Fast Typing Keyboard v1.275.1.162 allows unauthorized apps to overwrite arbitrary files in its internal storage via a dictionary traversal vulnerability and achieve arbitrary code execution...

9.8CVSS6AI score0.01474EPSS
SaveExploits1References3
OSV
OSV
•added 2023/04/14 12:15 p.m.•11 views

CVE-2023-27648

Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary code via the dex file in the internal storage...

9.8CVSS6.2AI score0.02596EPSS
SaveExploits1References3
Prion
Prion
•added 2023/04/14 12:15 p.m.•16 views

Directory traversal

Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary code via the dex file in the internal storage...

7.5CVSS9.6AI score0.02596EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2023/04/14 12:00 a.m.•20 views

PT-2023-15136 · Timmystudios · Timmystudios Fast Typing Keyboard

Name of the Vulnerable Software and Affected Versions: Timmystudios Fast Typing Keyboard version 1.275.1.162 Description: The issue allows unauthorized apps to overwrite arbitrary files in the internal storage of Timmystudios Fast Typing Keyboard via a dictionary traversal vulnerability, which ca...

9.8CVSS7.3AI score0.01474EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2023/04/14 12:00 a.m.•11 views

Timmystudios Fast Typing Keyboard 路径遍历漏洞

Timmystudios Fast Typing Keyboard is an Android app keyboard by Timmystudios. A security vulnerability exists in Timmystudios Fast Typing Keyboard version v1.275.1.162, which originated from a vulnerability that allows unauthorized applications to overwrite arbitrary files in its internal storage...

9.8CVSS9.1AI score0.01474EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/04/14 12:00 a.m.•13 views

Timmystudios Fast Typing Keyboard 路径遍历漏洞

Timmystudios Fast Typing Keyboard is an Android app keyboard by Timmystudios. A security vulnerability exists in Timmystudios Fast Typing Keyboard version 1.275.1.277, which stems from a directory traversal vulnerability. The vulnerability can be exploited to execute arbitrary code via a dex file...

9.8CVSS8.8AI score0.02596EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/14 12:00 a.m.•1 views

CVE-2023-27648: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary code via the dex file in the internal storage...

9.8CVSS6.6AI score0.02596EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/04/14 12:00 a.m.•7 views

CVE-2023-27648

Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary code via the dex file in the internal storage...

9.7AI score0.02596EPSS
SaveExploits1References3
OwnCloud
OwnCloud
•added 2023/02/13 12:00 a.m.•107 views

Insufficient path validation in Android App - ownCloud

Due to missing file path sanitation an attacker could read from and write to the Android app’s internal storage...

5CVSS5AI score0.00524EPSS
SaveExploits1Affected Software1
CNNVD
CNNVD
•added 2022/10/25 12:00 a.m.•16 views

tasks 安全漏洞

tasks is an open source application for to-do lists and reminders from tasks open source. A security vulnerability exists in tasks versions prior to 12.7.1 and prior to 13.0.1 that stems from a lack of authentication, which allows a malicious or compromised application on the same device to...

5.5CVSS5.7AI score0.00262EPSS
SaveExploits0References3
Hacker One
Hacker One
•added 2022/07/26 1:38 p.m.•42 views

ownCloud: GitHub Security Lab (GHSL) Vulnerability Report: Insufficient path validation in ReceiveExternalFilesActivity.java (GHSL-2022-060)

The Owncloud Android app was found to have insufficient path validation in the ReceiveExternalFilesActivity activity, allowing attackers to read from and write to the application's internal storage. This could be exploited by uploading arbitrary files from the app's internal storage or by writing...

5CVSS4.7AI score0.00524EPSS
SaveExploits1
OSV
OSV
•added 2021/06/11 3:15 p.m.•12 views

CVE-2021-25417

Improper authorization in SDP SDK prior to SMR JUN-2021 Release 1 allows access to internal storage...

7.5CVSS7.1AI score0.0039EPSS
SaveExploits0References1
NVD
NVD
•added 2021/06/11 3:15 p.m.•23 views

CVE-2021-25417

Improper authorization in SDP SDK prior to SMR JUN-2021 Release 1 allows access to internal storage...

7.5CVSS0.0039EPSS
SaveExploits0References1
Prion
Prion
•added 2021/06/11 3:15 p.m.•21 views

Authorization

Improper authorization in SDP SDK prior to SMR JUN-2021 Release 1 allows access to internal storage...

5CVSS7.5AI score0.0039EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/06/11 3:15 p.m.•7 views

CVE-2021-25417

Improper authorization in SDP SDK prior to SMR JUN-2021 Release 1 allows access to internal storage...

7.5CVSS7.3AI score0.0039EPSS
SaveExploits0References2
CVE
CVE
•added 2021/06/11 2:33 p.m.•61 views

CVE-2021-25417

CVE-2021-25417 affects the SDP SDK prior to Samsung SMR JUN-2021 Release 1, where improper authorization allows access to internal storage. The vulnerability is documented across multiple sources (NVD entry; Red Hat advisory; PRION; CVE listing; CNNVD) with CVSS v3.1 base score 7.5 (Network, Low ...

7.5CVSS7.4AI score0.0039EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/06/11 2:33 p.m.•39 views

CVE-2021-25417

Improper authorization in SDP SDK prior to SMR JUN-2021 Release 1 allows access to internal storage...

7.7AI score0.0039EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/11 12:00 a.m.•3 views

CVE-2021-25417: Improper Authorization

Improper authorization in SDP SDK prior to SMR JUN-2021 Release 1 allows access to internal storage...

7.5CVSS5.8AI score0.0039EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/06/11 12:00 a.m.•13 views

Samsung SMR 安全漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in the SDP SDK prior to SMR june -2021 version 1, which stems from incorrect authorization allowing access to internal storage...

7.5CVSS7.3AI score0.0039EPSS
SaveExploits0References1
NVD
NVD
•added 2021/03/04 10:15 p.m.•27 views

CVE-2021-25348

Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission...

2.4CVSS0.00268EPSS
SaveExploits0References2
Rows per page
Query Builder