2516 matches found
CVE-2020-25053: Undefined Security Weakness
An issue was discovered on Samsung mobile devices with Q10.0 exynos9830 chipsets software. RKP allows arbitrary code execution. The Samsung ID is SVE-2020-17435 August 2020...
CVE-2020-25056: Improper Check for Unusual or Exceptional Conditions
An issue was discovered on Samsung mobile devices with Q10.0 Galaxy S20 software. Because HAL improperly checks versions, bootloading by the S.LSI NFC chipset is mishandled. The Samsung ID is SVE-2020-16169 August 2020...
CVE-2020-25050: Undefined Security Weakness
An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. The CMC service allows attackers to obtain sensitive information. The Samsung ID is SVE-2020-17288 August 2020...
CVE-2020-25052: Out-of-bounds Write
An issue was discovered on Samsung mobile devices with Q10.0 exynos9830 chipsets software. H-Arx allows attackers to execute arbitrary code or cause a denial of service memory corruption because indexes are mishandled. The Samsung ID is SVE-2020-17426 August 2020...
q-park.fr Cross Site Scripting vulnerability OBB-1284958
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Ask Me Anything – Celebrating The Fifth Anniversary Of My Monthly Threat Webinar
In July 2015, I did my first threat webinar. I had planned to do it on a monthly basis, and never imagined I would still be doing it five years later, but here I am, still creating monthly webinars. I still do. I started the webinar series to help people understand the different threats targeting...
XSS Vulnerability in the CmsEasyQA Reward Q&A System of Siping City Jiuzhou Yitong Technology Co.
CmsEasyQA Reward Q&A System is a php Q&A system developed in PHP+MySQL. CmsEasyQA Reward Q&A System of Siping City Jiuzhou Yitong Technology Co., Ltd. has an XSS vulnerability, which can be exploited by attackers to obtain sensitive information such as user cookies...
CVE-2020-15584
An issue was discovered on Samsung mobile devices with Q10.0 software. Attackers can trigger an out-of-bounds access and device reset via a 4K wallpaper image because ImageProcessHelper mishandles boundary checks. The Samsung ID is SVE-2020-18056 July 2020...
Design/Logic Flaw
An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The kernel logging feature allows attackers to discover virtual addresses via vectors involving shared memory. The Samsung ID is SVE-2020-17605 July 2020...
Out-of-bounds
An issue was discovered on Samsung mobile devices with Q10.0 software. Attackers can trigger an out-of-bounds access and device reset via a 4K wallpaper image because ImageProcessHelper mishandles boundary checks. The Samsung ID is SVE-2020-18056 July 2020...
CVE-2020-15584
CVE-2020-15584 affects Samsung mobile devices running Q(10.0). The issue arises when processing a 4K wallpaper image, where ImageProcessHelper mishandles boundary checks, causing out-of-bounds access that can lead to a device reset. Samsung’s internal ID for this vulnerability is SVE-2020-18056 (...
CVE-2020-15584
An issue was discovered on Samsung mobile devices with Q10.0 software. Attackers can trigger an out-of-bounds access and device reset via a 4K wallpaper image because ImageProcessHelper mishandles boundary checks. The Samsung ID is SVE-2020-18056 July 2020...
PT-2020-14512
Name of the Vulnerable Software and Affected Versions Samsung mobile devices with Q10.0 software Description An issue was discovered where attackers can trigger an out-of-bounds access and device reset via a 4K wallpaper image because ImageProcessHelper mishandles boundary checks. Recommendations...
CVE-2020-15584: Improper Input Validation
An issue was discovered on Samsung mobile devices with Q10.0 software. Attackers can trigger an out-of-bounds access and device reset via a 4K wallpaper image because ImageProcessHelper mishandles boundary checks. The Samsung ID is SVE-2020-18056 July 2020...
CVE-2020-15579: Undefined Security Weakness
An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. Attackers can bypass Factory Reset Protection FRP via the KNOX API. The Samsung ID is SVE-2020-17318 July 2020...
CVE-2020-15583: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. StickerProvider allows directory traversal for access to system files. The Samsung ID is SVE-2020-17665 July 2020...
CVE-2020-5594
Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmission of sensitive information between CPU modules and GX Works3 and/or GX Works2 via unspecified vectors...
CVE-2020-5594
Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L and FX series CPU modules (all versions) are affected by CVE-2020-5594 due to cleartext transmission of sensitive information between CPU modules and GX Works3/GX Works2. The root cause is unsecured (cleartext) communication, with vectors not specified ...
CVE-2020-5594: Cleartext Transmission of Sensitive Information
Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmission of sensitive information between CPU modules and GX Works3 and/or GX Works2 via unspecified vectors...
PT-2020-18567
Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules affected versions not specified Description The issue allows cleartext transmission of sensitive information between CPU modules and GX Works3 and/or GX Works2 via...