Lucene search
+L

330 matches found

CNNVD
CNNVD
added 2022/08/05 12:0 a.m.9 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices Knox VPN module prior to SMR Aug-2022 Release 1, which stems from a vulnerability in the use ...

4CVSS5.1AI score0.00109EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/07/12 2:15 p.m.11 views

CVE-2022-33704

Improper validation vulnerability in ucmRetParcelable of KnoxSDK prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities...

8.5CVSS5.8AI score0.00106EPSS
SaveExploits0References2
OSV
OSV
added 2022/07/12 2:15 p.m.10 views

CVE-2022-33704

Improper validation vulnerability in ucmRetParcelable of KnoxSDK prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities...

7.8CVSS7.1AI score0.00106EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/12 2:15 p.m.3 views

CVE-2022-33701

Improper access control vulnerability in KnoxCustomManagerService prior to SMR Jul-2022 Release 1 allows attacker to call PowerManaer.goToSleep method which is protected by system permission by sending braodcast intent...

3.3CVSS5.8AI score0.00088EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/12 12:0 a.m.6 views

SAMSUNG Mobile devices 安全漏洞

Samsung KnoxCustomManagerService is an open source Android platform-based security solution from South Korea's Samsung Samsung that can enhance security across the board through a combination of physical means and software systems, while being perfectly compatible with the Android and Google...

3.3CVSS5.5AI score0.00088EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/07/11 12:0 a.m.10 views

PT-2022-21817 · Samsung · Knoxcustommanagerservice

Name of the Vulnerable Software and Affected Versions: KnoxCustomManagerService versions prior to SMR Jul-2022 Release 1 Description: The issue is related to an improper access control vulnerability. It allows an attacker to call the PowerManaer.goToSleep method, which is protected by system...

3.3CVSS3.7AI score0.00088EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/07/11 12:0 a.m.5 views

PT-2022-21818 · Samsung · Knox Guard

Name of the Vulnerable Software and Affected Versions: Knoxguard versions prior to SMR Jul-2022 Release 1 Description: The issue is related to an improper authorization vulnerability. It allows a local attacker to disable the keyguard and bypass the Knoxguard lock by performing a factory reset...

6.2CVSS5.5AI score0.0009EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
added 2022/06/12 4:45 p.m.23 views

discover.knoxcountylibrary.org Cross Site Scripting vulnerability OBB-2648036

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OSV
OSV
added 2022/05/13 1:11 a.m.10 views

GHSA-G3FC-8JV4-QMMV Apache Knox allows impersonation of users

For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this activity is audit logged and can be...

6.8CVSS6.5AI score0.00752EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2022/05/13 1:11 a.m.20 views

Apache Knox allows impersonation of users

For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this activity is audit logged and can be...

6.8CVSS6.6AI score0.00752EPSS
SaveExploits0References5Affected Software1
Openbugbounty
Openbugbounty
added 2022/04/24 1:39 a.m.10 views

knoxcountyliving.com Cross Site Scripting vulnerability OBB-2545074

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
CNVD
CNVD
added 2022/04/13 12:0 a.m.32 views

Samsung SMR Knox Manage Access Control Error Vulnerability

Samsung SMR is a system patch package from South Korea's Samsung Samsung. It provides patches for Samsung cell phone applications. Samsung SMR Knox Manage is vulnerable to an access control error, which can be exploited by attackers to bypass Knox Manage using the function keys of the hardware...

6.8CVSS2.3AI score0.00102EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/11 8:15 p.m.5 views

CVE-2022-26091

Improper access control vulnerability in Knox Manage prior to SMR Apr-2022 Release 1 allows that physical attackers can bypass Knox Manage using a function key of hardware keyboard...

6.8CVSS5.8AI score0.00102EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/11 8:15 p.m.26 views

CVE-2022-26091

Improper access control vulnerability in Knox Manage prior to SMR Apr-2022 Release 1 allows that physical attackers can bypass Knox Manage using a function key of hardware keyboard...

6.8CVSS0.00102EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/11 8:15 p.m.2 views

CVE-2022-26091

Improper access control vulnerability in Knox Manage prior to SMR Apr-2022 Release 1 allows that physical attackers can bypass Knox Manage using a function key of hardware keyboard...

6.8CVSS6.7AI score0.00102EPSS
SaveExploits0References2
Prion
Prion
added 2022/04/11 8:15 p.m.25 views

Improper access control

Improper access control vulnerability in Knox Manage prior to SMR Apr-2022 Release 1 allows that physical attackers can bypass Knox Manage using a function key of hardware keyboard...

4.6CVSS6.5AI score0.00102EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/04/11 7:37 p.m.77 views

CVE-2022-26091

CVE-2022-26091 affects Samsung Knox Manage with an improper access control vulnerability that can allow a local, physical attacker to bypass Knox Manage by using a function key on the hardware keyboard. The issue is described as a bypass of access controls via a hardware-key function, impacting c...

6.8CVSS6.4AI score0.00102EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/11 7:37 p.m.27 views

CVE-2022-26091

Improper access control vulnerability in Knox Manage prior to SMR Apr-2022 Release 1 allows that physical attackers can bypass Knox Manage using a function key of hardware keyboard...

5.7CVSS6.6AI score0.00102EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/04/11 12:0 a.m.7 views

Samsung SMR 授权问题漏洞

Samsung SMR is a system patch package from South Korea's Samsung Samsung. It provides patches for Samsung cell phone applications. Samsung SMR Knox Manage is vulnerable to an access control error, which can be exploited by attackers to bypass Knox Manage using the function keys of the hardware...

6.8CVSS5.6AI score0.00102EPSS
SaveExploits0References2
OSV
OSV
added 2022/02/11 6:15 p.m.10 views

CVE-2022-24000

PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent...

3.3CVSS5.8AI score0.00116EPSS
SaveExploits0References1
Rows per page
Query Builder