CVE-2021-25366

Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass the secret mode's authentication...

CVE-2021-25366

CVE-2021-25366 affects Samsung Internet prior to version 13.2.1.70 and is caused by improper access control that allows physically proximate attackers to bypass the secret mode authentication. The available documents identify the affected software/component and the underlying issue but do not pro...

CVE-2021-25354

The CVE-2021-25354 entry affects Samsung Internet (Samsung Browser). The issue is an improper input check in versions prior to 13.2.1.46, which can be exploited via a malicious deeplink to launch non-exported activities in the browser. Impact is that an attacker could trigger unintended activity ...

CVE-2021-25354

Improper input check in Samsung Internet prior to version 13.2.1.46 allows attackers to launch non-exported activity in Samsung Browser via malicious deeplink...

[SECURITY] Fedora 32 Update: tor-0.4.5.7-1.fc32

The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than makin g a direct connection, thus allowing both organizations and...

Weak Password Vulnerability in RSR Router WEB Management System of Ruijie Networks Co.

Ltd. is a company mainly engaged in information system integration services; Internet virtual private network services; Internet management services and other items. A weak password vulnerability exists in the RSR router WEB management system of Ruijie Networks Co. Ltd, which can be exploited by...

PT-2021-16547 · Samsung · Samsung Internet

Name of the Vulnerable Software and Affected Versions: Samsung Internet versions prior to 13.2.1.46 Description: The issue is related to an improper input check in Samsung Internet, which allows attackers to launch non-exported activity in Samsung Browser via a malicious deeplink. Recommendations...

SAMSUNG Internet 安全漏洞

Samsung Internet is a cell phone application from Samsung South Korea. It provides a browser function. An access control error vulnerability exists in Samsung Internet, which can be exploited by an attacker to bypass secret mode authentication...

March 25, 2021—KB5000850 (OS Build 18363.1474) Preview

None None...

PT-2021-16559 · Samsung · Samsung Internet

Name of the Vulnerable Software and Affected Versions: Samsung Internet versions prior to 13.2.1.70 Description: The issue is related to improper access control, allowing physically proximate attackers to bypass the secret mode's authentication. This could potentially lead to unauthorized access ...

Samsung Internet 安全漏洞

Samsung Internet is a cell phone application from Samsung South Korea. It provides a browser function. A security vulnerability exists in Samsung Internet prior to version 13.2.1.46, which can be exploited by an attacker to launch unexported activities in Samsung Browser via a malicious deeplink...

ProtonVPN CEO Blasts Apple for 'Aiding Tyrants’ in Myanmar

In a blog post filled with a passionate defense of human rights and internet privacy, Andy Yen, the CEO of secure internet provider ProtonVPN, blasted Apple for blocking its latest update and accused the tech juggernaut of helping the global spread of authoritarianism by “giving in to tyrants.” Y...

CVE-2021-1446

A vulnerability in the DNS application layer gateway ALG functionality used by Network Address Translation NAT in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a logic error that occurs when an affected...

CVE-2021-1446

A vulnerability in the DNS application layer gateway ALG functionality used by Network Address Translation NAT in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a logic error that occurs when an affected...

Weak Password Vulnerability in H3C NER324

H3C NER324 is a new-generation enterprise-grade Gigabit high-performance router launched by Xinhua San Technologies Co. It is targeted at the market of Internet cafes, sing-along bars, digital movie theaters and other cultural industries. The H3C NER324 suffers from a weak password vulnerability...

Fedora: Security Advisory for tor (FEDORA-2021-e68317166d)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Contiki 数字错误漏洞

Contiki is an open source cross-platform operating system for IoT Internet of Things devices. A security vulnerability exists in Contiki through 3.0, which stems from a variable that is prone to integer underflow, which can construct an invalid extension header that can lead to memory leakage...

CVE-2021-21402

Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This issue is more prevalent when Windows is used as the host OS. Servers that are exposed to the public...

Design/Logic Flaw

Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This issue is more prevalent when Windows is used as the host OS. Servers that are exposed to the public...

CVE-2021-21402 Unauthenticated Arbitrary File Access in Jellyfin

Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This issue is more prevalent when Windows is used as the host OS. Servers that are exposed to the public...