PT-2022-18627 · Unknown · Factorycamera

Name of the Vulnerable Software and Affected Versions: FactoryCamera versions prior to 2.1.96 Description: The issue is related to improper access control in FactoryCamera, allowing an attacker to access a file with system privilege. Recommendations: For versions prior to 2.1.96, update to versio...

MediaTek 芯片输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. A security vulnerability exists in the MediaTek chips, which stems from the possibility of reading uninitialized data due to incorrect input validation. This could result in the disclosure of local...

PT-2022-14324 · Vow · Vow

Name of the Vulnerable Software and Affected Versions: vow affected versions not specified Description: The issue is related to a possible read of uninitialized data due to improper input validation. This could lead to local information disclosure, with System execution privileges required. No us...

CVE-2022-20078: Concurrent Execution using Shared Resource with Improper Synchronization

In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05852819; Issue ID: ALPS05852819...

MediaTek 芯片安全漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. A security vulnerability exists in the MediaTek chips, which stems from a possible memory corruption due to incorrect error handling. This could result in the disclosure of local information that require...

Samsung FactoryCameraFB安全漏洞

Samsung FactoryCameraFB is a system application from Samsung South Korea. A security vulnerability exists in Samsung FactoryCameraFB prior to version 2.1.96, which stems from an incorrect access control vulnerability. An attacker could use this vulnerability to access the file with system...

PT-2022-14313

Name of the Vulnerable Software and Affected Versions mdp affected versions not specified Description The issue is related to a possible out of bounds write due to a missing bounds check in mdp. This could lead to local escalation of privilege, with System execution privileges needed. User...

CVE-2021-39741

In Keymaster, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-173567719...

CVE-2021-39739

In ArrayMap, there is a possible leak of the content of SMS messages due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...

CVE-2021-39739

In ArrayMap, there is a possible leak of the content of SMS messages due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...

Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that originates from the disclosure of log information in ArrayMap, where the contents of SMS messages can be compromised. An attacker could explo...

PT-2022-11063

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed fo...

PT-2022-2933

Name of the Vulnerable Software and Affected Versions Yandex Browser versions prior to 22.3.3.684 Description The issue is related to errors in handling symbolic links when loading the installation file, which can be exploited to elevate privileges. A local attacker with low privileges can execut...

CVE-2019-6834: Deserialization of Untrusted Data

A CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker to execute arbitrary code on the targeted system with SYSTEM privileges when placing a malicious user to be authenticated for this vulnerability to be successfully exploited. Affected Product: Schneide...

CVE-2021-26622

An remote code execution vulnerability due to SSTI vulnerability and insufficient file name parameter validation was discovered in Genian NAC. Remote attackers are able to execute arbitrary malicious code with SYSTEM privileges on all connected nodes in NAC through this vulnerability...

CVE-2021-26622

An remote code execution vulnerability due to SSTI vulnerability and insufficient file name parameter validation was discovered in Genian NAC. Remote attackers are able to execute arbitrary malicious code with SYSTEM privileges on all connected nodes in NAC through this vulnerability...

Remote code execution

An remote code execution vulnerability due to SSTI vulnerability and insufficient file name parameter validation was discovered in Genian NAC. Remote attackers are able to execute arbitrary malicious code with SYSTEM privileges on all connected nodes in NAC through this vulnerability...

CVE-2021-26622 Genian NAC remote code execution vulnerability

An remote code execution vulnerability due to SSTI vulnerability and insufficient file name parameter validation was discovered in Genian NAC. Remote attackers are able to execute arbitrary malicious code with SYSTEM privileges on all connected nodes in NAC through this vulnerability...

PT-2022-9771 · Genians · Genian Nac

Name of the Vulnerable Software and Affected Versions: Genian NAC affected versions not specified Description: A remote code execution issue was discovered due to a Server-Side Template Injection SSTI vulnerability and insufficient validation of the file name parameter. This allows remote attacke...

CVE-2021-26622: Improper Input Validation

An remote code execution vulnerability due to SSTI vulnerability and insufficient file name parameter validation was discovered in Genian NAC. Remote attackers are able to execute arbitrary malicious code with SYSTEM privileges on all connected nodes in NAC through this vulnerability...