1912 matches found
CVE-2022-30753
Improper use of a unique device ID in unprotected SecSoterService prior to SMR Jul-2022 Release 1 allows local attackers to get the device ID without permission...
Information disclosure
Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wifi information via unprotected intent broadcasting...
Information disclosure
Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access senstive information...
CVE-2022-34464
A vulnerability has been identified in SICAM GridEdge Classic All versions V2.7.3. The affected application uses an improperly protected file to import SSH keys. This could allow attackers with access to the filesystem of the host on which SICAM GridEdge runs to inject a custom SSH key to that fi...
SAMSUNG Mobile devices SecSoterService 安全漏洞
Samsung SecSoterService is a service for Samsung Samsung mobile devices. Samsung SecSoterService is vulnerable to an information disclosure vulnerability that stems from the improper use of unique device IDs in unprotected SecSoterService, which could be exploited by an attacker to unauthorized...
SAMSUNG Mobile devices TelephonyUI 安全漏洞
An access control error vulnerability exists in Samsung TelephonyUI, a Telephony service for Samsung mobile devices in South Korea that provides support for the Telephony Application Programming Interface TAPI. The vulnerability stems from a lack of proper permission checking in TelephonyUI, whic...
SAMSUNG Mobile devices 安全漏洞
Samsung Wearable Manager is an application for Samsung Samsung mobile devices that connects wearable devices to mobile devices. Samsung Wearable Manager is vulnerable to an information disclosure vulnerability that stems from the installation of an unprotected dynamic receiver, which could be...
CVE-2022-33694
Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wifi information via unprotected intent broadcasting...
PT-2022-21804 · Unknown · Telephonyui
Name of the Vulnerable Software and Affected Versions: TelephonyUI versions prior to SMR Jul-2022 Release 1 Description: The issue is related to improper access control in TelephonyUI, allowing attackers to modify the preferred network type through an unprotected binder call. Recommendations: For...
CVE-2022-2229
An improper authorization issue in GitLab CE/EE affecting all versions from 13.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker to extract the value of an unprotected variable they know the name of in public projects or private projects they're a member of...
UBUNTU-CVE-2022-2229
An improper authorization issue in GitLab CE/EE affecting all versions from 13.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker to extract the value of an unprotected variable they know the name of in public projects or private projects they're a member of...
CVE-2022-2229
An improper authorization issue in GitLab CE/EE affecting all versions from 13.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker to extract the value of an unprotected variable they know the name of in public projects or private projects they're a member of...
Information Disclosure
parse-server is vulnerable to information disclosure. A remote unauthenticated attacker is able to gain access to sensitive user information because the library does not remove protected fields in classes and passes them to the client...
PT-2022-15334 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.7 through 14.10.4 GitLab CE/EE versions 15.0 through 15.0.3 GitLab CE/EE versions 15.1 through 15.1.0 Description: An improper authorization issue in GitLab CE/EE allows an attacker to extract the value of an...
Check Point Endpoint Security Client 安全漏洞
Check Point Endpoint Security Client is an endpoint security protection software from Check Point Israel. A security vulnerability exists in Check Point Endpoint Security Client. An attacker can cause a fatal error to occur by modifying an unprotected registry to trigger a denial of service...
CVE-2022-33932
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain an unprotected primary channel vulnerability. An unauthenticated network malicious attacker may potentially exploit this vulnerability, leading to a denial of filesystem services...
The vulnerability of the Html::rawElement and Message::text components of the software environment for implementing the hypertext environment of MediaWiki allows a attacker to perform XSS attacks.
The vulnerability of the Html::rawElement and Message::text components of the software environment for implementing the MediaWiki hypertext environment exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry o...
The vulnerability of the Desired State Configuration service in the Windows operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows Operating System’s Desired State Configuration service is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Check Point Response to CVE-2022-23744 - Use of unprotected registry change to disable Endpoint protection
Symptoms - Check Point Endpoint Security Client before version E86.50 fails to protect against specific registry change, allowing a local administrator to disable endpoint protection. This issue was discovered and responsibly disclosed by Erwin Chan and received ID CVE-2022-23744. Solution This...