CVE-2023-30711

Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider...

CVE-2023-30711

Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider...

CVE-2023-30711

Technical details (affected products, versions, exploit information, and fixes) are not publicly provided in the supplied documents. Monitor for updates from Samsung and vendors for a confirmed fix and impact.

CVE-2023-30710

CVE-2023-30710 affects Samsung Knox AI prior to the SMR Sep-2023 Release 1. The issue is an improper input validation vulnerability that enables local attackers with low privileges and no user interaction to gain privileged activities on affected devices. The root cause is input validation weakne...

CVE-2023-30709

Improper access control in Dual Messenger prior to SMR Sep-2023 Release 1 allows local attackers launch activity with system privilege...

CVE-2023-30709

Improper access control in Dual Messenger prior to SMR Sep-2023 Release 1 allows local attackers launch activity with system privilege...

CVE-2023-30709

CVE-2023-30709 concerns Samsung Dual Messenger: improper access control in prior to SMR Sep-2023 Release 1 allows local attackers to launch activities with system privileges. Affected software is Samsung Mobile firmware with Dual Messenger; root cause is insufficient access controls between conte...

CVE-2023-30708

CVE-2023-30708 concerns Samsung devices’ SecSettings prior to SMR Sep-2023 Release 1. The issue is described as an improper authentication flaw that allows an attacker to access the Captive Portal Wi‑Fi while the device is in Reactivation Lock status. Concrete details across connected sources ind...

CVE-2023-30707

Improper input validation vulnerability in FileProviderStatusReceiver in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows local attackers to delete arbitrary files with Samsung Keyboard privilege...

CVE-2023-30706

Improper authorization in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows attacker to read arbitrary file with system privilege...

CVE-2023-30706

Improper authorization in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows attacker to read arbitrary file with system privilege...

CVE-2023-30715: Undefined Security Weakness

Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers to access location information set in Weather without permission...

PT-2023-22919 · Unknown · Wifiapautohotspotenablingactivity

Name of the Vulnerable Software and Affected Versions: WifiApAutoHotspotEnablingActivity versions prior to SMR Sep-2023 Release 1 Description: The issue is related to the improper export of android application components, allowing a local attacker to change the Auto Hotspot setting. This can be...

Input validation

Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of bounds memory...

CVE-2022-39881

The CVE-2022-39881 entry concerns Samsung Exynos modems with an improper input validation vulnerability in processing the SIB12 PDU, leading to potential out-of-bounds memory reads. Affected are Exynos modem components prior to the SMR Sep-2022 Release. The connected sources indicate a remoteabil...

Authorization

Improper authorization in Dynamic Lockscreen prior to SMR Sep-2022 Release 1 in Android R11 and 3.3.03.66 in Android S12 allows unauthorized use of javascript interface api...

CVE-2022-39862

Improper authorization in Dynamic Lockscreen prior to SMR Sep-2022 Release 1 in Android R11 and 3.3.03.66 in Android S12 allows unauthorized use of javascript interface api...

PT-2022-25053 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to SMR Sep-2022 Release 1 Android version 3.3.03.66 in Android S12 Description: The issue is related to improper authorization in the Dynamic Lockscreen, allowing unauthorized use of the javascript interface api...

CVE-2022-39862

CVE-2022-39862 affects Samsung Mobile devices running Android R (11) and Android S (12) with the Dynamic Lockscreen. The vulnerability is due to improper authorization of the dynamic lockscreen javascript interface API, enabling unauthorized use. Affected versions include SMR Sep-2022 Release 1 f...

intranetsites.com Cross Site Scripting vulnerability OBB-2963231

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...