CVE-2020-10846

CVE-2020-10846 affects Samsung mobile devices with P(9.x) and Q(10.x) software. The issue enables OEM unlock on KG-enrolled devices, potentially allowing download of unwanted binaries. Samsung ID: SVE-2019-16554. No explicit remediation or exploitation details are provided in the connected docume...

CVE-2020-10833

CVE-2020-10833 affects Samsung mobile devices running Q(10.0). The issue is in the DeX Lockscreen, which can allow attackers to access the quick panel and notifications. The Samsung internal ID is SVE-2019-16532 (March 2020). No explicit exploitation details, affected versions, or fixes are provi...

PT-2020-12354

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software Samsung mobile devices with P9.0 software Samsung mobile devices with Q10.0 software Description An issue allows attackers to trigger an update to arbitrary touch-screen firmware on affected devices...

CVE-2020-10837: Improper Input Validation

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 with TEEGRIS software. The Esecomm Trustlet allows a stack overflow and arbitrary code execution. The Samsung ID is SVE-2019-15984 February 2020...

CVE-2020-10833: Missing Authentication for Critical Function

An issue was discovered on Samsung mobile devices with Q10.0 software. The DeX Lockscreen allows attackers to access the quick panel and notifications. The Samsung ID is SVE-2019-16532 March 2020...

CVE-2020-10844: Out-of-bounds Read

An issue was discovered on Samsung mobile devices with O8.x, P9.x, and Q10.0 software. There is an out-of-bounds read vulnerability in media.audiopolicy. The Samsung ID is SVE-2019-16333 February 2020...

CVE-2020-10845: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. There is a race condition leading to a use-after-free in MTP. The Samsung ID is SVE-2019-16520 February 2020...

CVE-2020-10830: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Attackers can view notifications by entering many PINs in Lockdown mode. The Samsung ID is SVE-2019-16590 March 2020...

CVE-2020-10846: Improper Authentication

An issue was discovered on Samsung mobile devices with P9.x and Q10.x software. Attackers can enable the OEM unlock feature on a KG-enrolled devices, leading to potentially unwanted binaries being downloaded. The Samsung ID is SVE-2019-16554 February 2020...

CVE-2019-20532: Missing Authentication for Critical Function

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. Attackers can access the Developer options without authentication. The Samsung ID is SVE-2019-15800 December 2019...

PT-2020-12377

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software Samsung mobile devices with P9.0 software Samsung mobile devices with Q10.0 software Description An issue was discovered where kernel stack addresses are leaked to userspace. Recommendations For Samsun...

CVE-2018-10704

yidashi yii2cmf 2.0 has XSS via the /search q parameter...

PT-2020-8516

Name of the Vulnerable Software and Affected Versions: yidashi yii2cmf version 2.0 Description: The issue is related to a Cross-Site Scripting XSS problem. It occurs via the "/search" API endpoint, specifically through the q parameter. This allows for potential malicious script injection...

CVE-2018-10704: Improper Neutralization of Input During Web Page Generation

yidashi yii2cmf 2.0 has XSS via the /search q parameter...

CVE-2020-5531

Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller ModuleQ24DHCCPU-V, Q24DHCCPU-VG User Ethernet port CH1, CH2: First 5 digits of serial number 21121 or before, MELSEC iQ-R Series C Controller Module / C Intelligent Function ModuleR12CCPU-V Ethern...

PT-2020-7775

Name of the Vulnerable Software and Affected Versions: Fork CMS versions prior to 3.8.4 Description: A cross-site scripting XSS issue exists due to insufficient input validation in the loadForm function. This allows remote attackers to inject arbitrary web script or HTML via the q widget paramete...

Intellian Satellian Aptus Web Console Remote Code Execution Vulnerability

Intellian Satellian Aptus Web is a console system. A remote code execution vulnerability exists in the Intellian Satellian Aptus Web console. An attacker can execute arbitrary code on the target system by sending a malicious construct request to /cgi-bin/libagent.cgi using the Q field in the JSON...

RICOH Printers 'CVE-2019-14302' Debug Port Vulnerability

Multiple RICOH printers and multifunction printers are prone to a vulnerability where a debug port can be used. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

PT-2020-19895 · Intellian · Intellian Satellian +1

Name of the Vulnerable Software and Affected Versions: Intellian Aptus Web version 1.24 Intellian Satellian version 1.12 Description: The issue allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the "cgi-bin/libagent.cgi" URI. A valid sid cookie for a log...

CVE-2020-7980: Improper Neutralization of Special Elements used in an OS Command

Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed...