PT-2021-16534

Name of the Vulnerable Software and Affected Versions: S Assistant versions prior to 6.5.01.22 Description: The issue allows unauthorized actions, including denial of service attacks, by hijacking a non-existent provider in S Assistant. Recommendations: For versions prior to 6.5.01.22, update to...

CVE-2021-25347: Improper Authentication

Hijacking vulnerability in Samsung Email application version prior to SMR Feb-2021 Release 1 allows attackers to intercept when the provider is executed...

CVE-2021-25342: Improper Authentication

Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of service attack by hijacking the provider...

CVE-2021-25343: Improper Authentication

Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 in Android O8.1 and below and 3.8.00.13 in Android P9.0 and above allows unauthorized actions including denial of service attack by hijacking the provider...

CVE-2021-25341: Improper Authentication

Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial of service attack by hijacking the provider...

PT-2021-16536

Name of the Vulnerable Software and Affected Versions: Samsung Members versions prior to 2.4.81.13 in Android O8.1 and below Samsung Members versions prior to 3.8.00.13 in Android P9.0 and above Description: The issue allows unauthorized actions, including denial of service attacks, by hijacking ...

PT-2021-16540

Name of the Vulnerable Software and Affected Versions: Samsung Email application versions prior to SMR Feb-2021 Release 1 Description: The issue allows attackers to intercept when the provider is executed, due to a hijacking vulnerability in the Samsung Email application. Recommendations: For...

Samsung mobile devices 授权问题漏洞

Samsung mobile devices O and others are products of Samsung, South Korea.Samsung mobile devices O is a series of cell phones.Samsung mobile devices P is a series of mobile hard disk products.Samsung mobile devices is a cell phone Samsung mobile devices is a mobile phone application. A security...

S Assistant 授权问题漏洞

Samsung S Assistant is a cell phone application from Samsung South Korea. It provides a cell phone management feature. A security vulnerability exists in S Assistant prior to version 6.5.01.22, which arises from a call to a non-existent provider allowing unauthorized operations, including...

Samsung mobile devices 授权问题漏洞

Samsung mobile devices O and Samsung mobile devices P are both products of Samsung South Korea.Samsung mobile devices O is a line of cell phones.Samsung mobile devices P is a line of mobile hard drives. A security vulnerability exists in Samsung Members that originates from a call to a non-existe...

Malaysia Air Downplays Frequent-Flyer Data Breach

Malaysia Airlines sent out an email to frequent flyer program members assuring them that there’s “no evidence” their personal data has been misused in the wake of a supply-chain attack via a third-party vendor. However, experts think that’s unlikely. And, they say the repercussions could be...

CVE-2021-23347

The package github.com/argoproj/argo-cd/cmd before 1.7.13, from 1.8.0 and before 1.8.6 are vulnerable to Cross-site Scripting XSS the SSO provider connected to Argo CD would have to send back a malicious error message containing JavaScript to the user...

CVE-2021-23347 Cross-site Scripting (XSS)

The package github.com/argoproj/argo-cd/cmd before 1.7.13, from 1.8.0 and before 1.8.6 are vulnerable to Cross-site Scripting XSS the SSO provider connected to Argo CD would have to send back a malicious error message containing JavaScript to the user...

CVE-2021-23347

The package github.com/argoproj/argo-cd/cmd before 1.7.13, from 1.8.0 and before 1.8.6 are vulnerable to Cross-site Scripting XSS the SSO provider connected to Argo CD would have to send back a malicious error message containing JavaScript to the user...

CVE-2021-23347

The package github.com/argoproj/argo-cd/cmd before 1.7.13, from 1.8.0 and before 1.8.6 are vulnerable to Cross-site Scripting XSS the SSO provider connected to Argo CD would have to send back a malicious error message containing JavaScript to the user...

CVE-2021-23347: Improper Neutralization of Input During Web Page Generation

The package github.com/argoproj/argo-cd/cmd before 1.7.13, from 1.8.0 and before 1.8.6 are vulnerable to Cross-site Scripting XSS the SSO provider connected to Argo CD would have to send back a malicious error message containing JavaScript to the user...

CVE-2021-25330

Calling of non-existent provider in MobileWips application prior to SMR Feb-2021 Release 1 allows unauthorized actions including denial of service attack by hijacking the provider...

CVE-2021-25330

Calling of non-existent provider in MobileWips application prior to SMR Feb-2021 Release 1 allows unauthorized actions including denial of service attack by hijacking the provider...

UFIDA U8-OA l***.jsp suffers from SQL injection vulnerability.

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA l.jsp, which can be exploited by an attacker to obtain sensitive information from the database...

CVE-2021-25330: Undefined Security Weakness

Calling of non-existent provider in MobileWips application prior to SMR Feb-2021 Release 1 allows unauthorized actions including denial of service attack by hijacking the provider...