CVE-2022-27840

SamsungRecovery prior to version 8.1.43.0 contains an improper access control vulnerability that allows a local attacker to delete arbitrary files with SamsungRecovery permissions. The issue is confirmed across multiple sources and is mitigated by upgrading to 8.1.43.0 or later. If upgrading is n...

CVE-2022-27840

Improper access control vulnerability in SamsungRecovery prior to version 8.1.43.0 allows local attckers to delete arbitrary files as SamsungRecovery permission...

CVE-2022-27836

CVE-2022-27836 impacts Samsung Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1, due to improper access control and path traversal. This allows local attackers to access arbitrary system files; the patch adds validation logic to prevent arbitrary file access (security u...

CVE-2022-27836

Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers to access arbitrary system files without a proper permission. The patch adds proper validation logic to prevent arbitrary files access...

Samsung Flow 路径遍历漏洞

Samsung flow is an application for Samsung Samsung mobile devices, a software used to connect Samsung to Win10 computers for a seamless, secure, and connected experience. path traversal vulnerability exists in versions prior to Samsung Flow 4.8.07.4, which stems from the lack of proper permission...

Samsung Galaxy Store 安全漏洞

Samsung Mobile Samsung Galaxy Store is an application store of Samsung Mobile, a South Korean company. A security vulnerability exists in Galaxy Store versions prior to 4.5.40.5, which stems from incorrect cleaning of incoming intent. A local attacker could exploit the vulnerability to access...

Fortinet FortiEDR Trust Management Issue Vulnerability (CNVD-2022-47976)

Fortinet FortiEDR is a scratch-built endpoint security solution from Fortinet U.S.A. Fortinet FortiEDR is vulnerable to a trust management issue that stems from the use of hard-coded encrypted RSA keys, which can be exploited by local attackers to disable and offload collectors from endpoints in...

CVE-2022-25339

ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers...

CVE-2022-25339

ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers...

Improper access control

ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers...

Vulnerabilities fixed in FortiClient

Vulnerabilities have been fixed in FortiClient for Linux and Windows. The vulnerabilities allow a local malicious agent to to gain access to system data and obtain elevated privileges. Fortinet has released updates to fix the vulnerability. More information can be found on the pages below:...

CVE-2022-23440

A use of hard-coded cryptographic key vulnerability CWE-321 in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment...

Fortinet FortiEDR 信任管理问题漏洞

Fortinet FortiEDR is a scratch-built endpoint security solution from Fortinet U.S.A. Fortinet FortiEDR is vulnerable to a trust management issue that stems from the use of hard-coded encrypted RSA keys, which can be exploited by local attackers to disable and offload collectors from endpoints in...

Trend Micro Antivirus for Mac Link Following Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Antivirus for Mac. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

SUSE Rancher Desktop 访问控制错误漏洞

Rancher Desktop is an open source software that allows you to manage Kubernetes and containers as a desktop on Mac, Windows, and Linux systems. An access control error vulnerability exists in previous versions of SUSE Rancher Desktop V, which can be exploited by an attacker on a local network to...

Samsung SettingsReceiver PendingIntent Hijacking Vulnerability

Samsung SettingsReceiver is a component in Samsung Samsung mobile devices. Samsung SettingsReceiver suffers from a PendingIntent hijacking vulnerability that originates from unauthorized access in SettingsReceiver, which can be exploited by a local attacker to gain unauthorized access to media...

CVE-2021-3456

An improper authorization handling flaw was found in Foreman. The Salt plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denia...

CVE-2022-21947

A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API steve to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V...

CVE-2021-46705

A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150400.7.1. SUSE openSUSE Factory grub2...

Design/Logic Flaw

A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150400.7.1. SUSE openSUSE Factory grub2...