Sql injection

Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 Galaxy S6 devices has SQL injection, aka SVE-2015-5081...

Null pointer dereference

The getURL function in drivers/secfilter/urlparser.c in secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 Note 3 and SM-G920F build G920FXXU2COH2 Galaxy S6 devices allows attackers to trigger a NULL pointer dereference via a "GET HTTP/1.1" request, aka SVE-2016-5036...

Design/Logic Flaw

secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 Note 3 and SM-G920F build G920FXXU2COH2 Galaxy S6 devices allows attackers to bypass URL filtering by inserting an "exceptional URL" in the query string, as demonstrated by the...

CVE-2016-2566

The CVE-2016-2566 entry concerns Samsung SecEmailSync on Galaxy S6 (SM-G920F, build G920FXXU2COH2). Connected documents confirm a SQL injection in the SecEmailSync plugin (SVE-2015-5081). Reported impact in CNVD sources states an attacker could exploit this to read e-mails; the CNVD-2017-07204 en...

CVE-2016-2565

Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 Galaxy S6 devices allows attackers to read sent e-mail messages, aka SVE-2015-5081...

CVE-2016-4030

Technical details for CVE-2016-4030 are not publicly provided in the supplied documents. The Connected documents do not contain product/version/root-cause/impact/remediation for this CVE. Monitor for updates from official advisories and vendor advisories.

CVE-2016-2566

Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 Galaxy S6 devices has SQL injection, aka SVE-2015-5081...

CVE-2016-2565

The connected records corroborate that Samsung SecEmailSync on the Galaxy S6 (Samsung SM-G920F, build G920FXXU2COH2) contains a vulnerability class in the SecEmailSync plugin. CNVD entries describe two concrete issues: (1) CVE-2016-2565/2566 family in SecEmailSync, with an SQL injection vector (S...

CVE-2015-7893

SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaScript...

Code injection

SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaScript...

CVE-2015-7893

CVE-2015-7893 – Samsung SecEmailUI script injection : The Samsung Galaxy S6 email client’s SecEmailUI does not sanitize HTML content in emails, allowing a remote attacker to execute arbitrary JavaScript via a crafted message. The vulnerability affects the email viewer/editor component and could e...

CVE-2015-7893

SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaScript...

ISC BIND 9.x < 9.9.9-P4 / 9.9.9-S6 / 9.10.4-P4 / 9.11.0-P1 DoS

Binary data 9877.prm...

ISC BIND RTYPE ANY Query Denial of Service Vulnerability - Linux

ISC BIND is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; ifdescription...

ISC BIND 'nxdomain-redirect' Feature Response DoS Vulnerability - Windows

ISC BIND is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; ifdescription...

Multiple Samsung Galaxy Products Information Disclosure Vulnerability

Android for Samsung Galaxy S6 Edge is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for use in smartphones released by Samsung in South Korea. The security vulnerability exists in Android versions 5.0.2, 5.1.1 and 6.0.1 used on Samsung Galaxy S6...

CVE-2016-6910

The non-existent notification listener vulnerability was introduced in the initial Android 5.0.2 builds for the Samsung Galaxy S6 Edge devices, but the vulnerability can persist on the device even after the device has been upgraded to an Android 5.1.1 or 6.0.1 build. The vulnerable system app giv...

Code injection

The non-existent notification listener vulnerability was introduced in the initial Android 5.0.2 builds for the Samsung Galaxy S6 Edge devices, but the vulnerability can persist on the device even after the device has been upgraded to an Android 5.1.1 or 6.0.1 build. The vulnerable system app giv...

CVE-2016-6910

The non-existent notification listener vulnerability was introduced in the initial Android 5.0.2 builds for the Samsung Galaxy S6 Edge devices, but the vulnerability can persist on the device even after the device has been upgraded to an Android 5.1.1 or 6.0.1 build. The vulnerable system app giv...

CVE-2016-6910

The CVE-2016-6910 entry describes a local notification-listener disclosure affecting Samsung Galaxy S6 Edge devices running Android 5.0.2 initially. The vulnerability arises from a non-existent notification listener that, via a vulnerable system app, can allow a non-existent app (package name com...