Lucene search
+L

1451 matches found

Positive Technologies
Positive Technologies
added 2022/03/08 12:0 a.m.8 views

PT-2022-16993 · Unknown · Apkinstaller

Name of the Vulnerable Software and Affected Versions: ApkInstaller versions prior to SMR MAR-2022 Release Description: The issue is related to improper access control in the dynamic receiver of ApkInstaller, allowing unauthorized attackers to execute arbitrary activities without proper permissio...

7.9CVSS7.8AI score0.00122EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/03/08 12:0 a.m.8 views

PT-2022-16992 · Google · Wear Os

Name of the Vulnerable Software and Affected Versions: Wear OS version 3.0 prior to Firmware update MAR-2022 Release Description: The issue is related to an improper access control vulnerability in the StRetailModeReceiver component. This vulnerability allows untrusted applications to reset defau...

4.4CVSS3.8AI score0.00429EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/03/08 12:0 a.m.7 views

PT-2022-1881 · Microsoft · Windows Nt Lan Manager Datagram Receiver Driver +1

Name of the Vulnerable Software and Affected Versions: Windows NT Lan Manager Datagram Receiver Driver affected versions not specified Description: The issue is related to information disclosure in the NT Lan Manager Datagram Receiver Driver of the Microsoft Windows operating system. It allows an...

5.5CVSS5.6AI score0.00788EPSS
SaveExploits0References8
OSV
OSV
added 2022/03/07 9:15 a.m.7 views

CVE-2021-25009

The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses...

5.3CVSS5.8AI score0.01198EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/03/07 9:15 a.m.5 views

CVE-2021-25009

The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses...

5.3CVSS6AI score0.01198EPSS
SaveExploits2References2
Prion
Prion
added 2022/03/07 9:15 a.m.21 views

Design/Logic Flaw

The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses...

5CVSS5.1AI score0.01198EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
added 2022/03/02 12:0 a.m.8 views

rtl_433 缓冲区错误漏洞

Rtl433 is a general-purpose data receiver from Benjamin Larsson's personal developer. A program for decoding radio transmissions from devices in the Ism band and other frequencies. A security vulnerability exists in rtl433 version 21.12, which stems from the inclusion of a stack overflow in the...

5.5CVSS5.7AI score0.00833EPSS
SaveExploits0References4
OSV
OSV
added 2022/02/11 6:15 p.m.7 views

CVE-2022-23999

PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent...

3.3CVSS5.8AI score0.00116EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/11 6:15 p.m.11 views

CVE-2022-24000

PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent...

3.3CVSS5.8AI score0.00116EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/11 6:15 p.m.4 views

CVE-2022-23999

PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent...

3.9CVSS5.4AI score0.00116EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/11 6:15 p.m.7 views

CVE-2022-24000

PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent...

3.9CVSS5.4AI score0.00116EPSS
SaveExploits0References2
OSV
OSV
added 2022/02/11 6:15 p.m.4 views

CVE-2022-23996

Unprotected component vulnerability in StTheaterModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to enable bedtime mode without a proper permission...

3.3CVSS5.8AI score0.00438EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/11 6:15 p.m.7 views

CVE-2022-22292

Unprotected dynamic receiver in Telecom prior to SMR Feb-2022 Release 1 allows untrusted applications to launch arbitrary activity...

7.8CVSS7.2AI score0.00131EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/11 6:15 p.m.6 views

CVE-2022-23995

Unprotected component vulnerability in StBedtimeModeAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission...

4.3CVSS5.4AI score0.00438EPSS
SaveExploits0References2
NVD
NVD
added 2022/02/11 6:15 p.m.28 views

CVE-2022-22292

Unprotected dynamic receiver in Telecom prior to SMR Feb-2022 Release 1 allows untrusted applications to launch arbitrary activity...

7.8CVSS0.00131EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/11 6:15 p.m.11 views

CVE-2022-22292

Unprotected dynamic receiver in Telecom prior to SMR Feb-2022 Release 1 allows untrusted applications to launch arbitrary activity...

7.8CVSS5.9AI score0.00131EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/11 6:15 p.m.23 views

Code injection

Unprotected dynamic receiver in Telecom prior to SMR Feb-2022 Release 1 allows untrusted applications to launch arbitrary activity...

4.6CVSS7.6AI score0.00131EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/02/11 5:40 p.m.29 views

CVE-2022-22292

Unprotected dynamic receiver in Telecom prior to SMR Feb-2022 Release 1 allows untrusted applications to launch arbitrary activity...

7.1CVSS7.8AI score0.00131EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/02/11 12:0 a.m.6 views

Samsung KnoxPrivacyNoticeReceiver 输入验证错误漏洞

Samsung SettingsReceiver is a component in Samsung Samsung mobile devices. Samsung SettingsReceiver suffers from a PendingIntent hijacking vulnerability that originates from unauthorized access in SettingsReceiver, which can be exploited by a local attacker to gain unauthorized access to media...

7.1CVSS5.6AI score0.001EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/02/11 12:0 a.m.24 views

Samsung Telecom 安全漏洞

Samsung Telecom is a communication feature for Samsung Samsung mobile devices. Samsung Telecom suffers from an authorization issue vulnerability that stems from a lack of proper privileges for dynamic receivers in Telecom, which could be exploited by an attacker to launch arbitrary activity...

7.8CVSS5.8AI score0.00131EPSS
SaveExploits0References2
Rows per page
Query Builder