Lucene search
+L

2583 matches found

CNVD
CNVD
added 2021/07/12 12:00 a.m.41 views

Samsung PackageManager has an unspecified vulnerability

Samsung PackageManager is an application from Samsung Korea. A security vulnerability exists in versions prior to Samsung PackageManager SMR July-2021 Release 1, which can be exploited by attackers to gain dangerous levels of privileges without user confirmation in limited circumstances...

7.8CVSS5.3AI score0.00102EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/08 2:15 p.m.9 views

CVE-2021-25427

SQL injection vulnerability in Bluetooth prior to SMR July-2021 Release 1 allows unauthorized access to paired device information...

6.5CVSS5.8AI score0.00206EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/08 2:15 p.m.27 views

CVE-2021-25429

Improper privilege management vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to access the Bluetooth information in Bluetooth application...

4.3CVSS0.00159EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/08 2:15 p.m.24 views

CVE-2021-25427

SQL injection vulnerability in Bluetooth prior to SMR July-2021 Release 1 allows unauthorized access to paired device information...

6.5CVSS0.00206EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/08 2:15 p.m.29 views

CVE-2021-25430

Improper access control vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to access the Bluetooth information in Bluetooth application...

4.3CVSS0.00159EPSS
SaveExploits0References1
Prion
Prion
added 2021/07/08 2:15 p.m.22 views

Input validation

Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances...

4.6CVSS7.5AI score0.00102EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/07/08 2:15 p.m.7 views

CVE-2021-25427

SQL injection vulnerability in Bluetooth prior to SMR July-2021 Release 1 allows unauthorized access to paired device information...

6.5CVSS6.7AI score0.00206EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/07/08 2:15 p.m.5 views

CVE-2021-25430

Improper access control vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to access the Bluetooth information in Bluetooth application...

4.3CVSS5.1AI score0.00159EPSS
SaveExploits0References2
Prion
Prion
added 2021/07/08 2:15 p.m.22 views

Improper access control

Improper access control vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to access the Bluetooth information in Bluetooth application...

3.3CVSS4.5AI score0.00159EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/07/08 2:15 p.m.22 views

Design/Logic Flaw

Improper component protection vulnerability in SmsViewerActivity of Samsung Message prior to SMR July-2021 Release 1 allows untrusted applications to access Message files...

5CVSS7.5AI score0.0058EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/07/08 1:45 p.m.38 views

CVE-2021-25430

Improper access control vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to access the Bluetooth information in Bluetooth application...

4.8AI score0.00159EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/08 1:45 p.m.55 views

CVE-2021-25430

CVE-2021-25430 is an improper access control vulnerability in a Bluetooth application, allowing untrusted apps to access Bluetooth information. Root cause: access-control failure in the Bluetooth component. Impact: confidentiality exposure at a LOW level (C:L) per CVSS3.1 (AV:A, AC:L, PR:N, UI:N,...

4.3CVSS4.5AI score0.00159EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/07/08 1:43 p.m.58 views

CVE-2021-25429

Technical details (affected product/versions/root cause/exploit status) are not publicly available in the provided documents. Monitor for updates from NVD/Red Hat and security advisories.

4.3CVSS4.5AI score0.00159EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/08 1:43 p.m.35 views

CVE-2021-25429

Improper privilege management vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to access the Bluetooth information in Bluetooth application...

4.8AI score0.00159EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/08 1:43 p.m.72 views

CVE-2021-25428

The CVE-2021-25428 entry concerns Samsung’s PackageManager, affected before the SMR July-2021 Release 1. The root cause is an improper validation check in PackageManager that can let untrusted apps obtain dangerous level permissions without user confirmation in limited circumstances (local, low c...

7.8CVSS7.5AI score0.00102EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/07/08 1:43 p.m.58 views

CVE-2021-25427

CVE-2021-25427 describes a SQL injection vulnerability in Bluetooth prior to the Samsung SMR July-2021 Release 1, enabling unauthorized access to data on paired devices. The vulnerability is tied to the Bluetooth module's handling of SQL statements, with documented impact being access to paired d...

6.5CVSS6.6AI score0.00206EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/08 1:43 p.m.29 views

CVE-2021-25427

SQL injection vulnerability in Bluetooth prior to SMR July-2021 Release 1 allows unauthorized access to paired device information...

6.9AI score0.00206EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/08 1:43 p.m.63 views

CVE-2021-25426

CVE-2021-25426 concerns Samsung Message’s SmsViewerActivity, where improper component protection permits untrusted apps to access Message files. Affected: Samsung Message versions before SMR July-2021 Release 1. Root cause is lack of proper access controls on SmsViewerActivity. Impact, as stated,...

7.5CVSS7.4AI score0.0058EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2021/06/11 3:15 p.m.21 views

CVE-2021-25412

An improper access control vulnerability in genericssoservice prior to SMR JUN-2021 Release 1 allows local attackers to execute protected activity with system privilege via untrusted applications...

7.8CVSS0.00107EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/11 3:15 p.m.5 views

CVE-2021-25411

Improper address validation vulnerability in RKP api prior to SMR JUN-2021 Release 1 allows root privileged local attackers to write read-only kernel memory...

4.4CVSS5.8AI score0.00103EPSS
SaveExploits0References1
Rows per page
Query Builder