Lucene search
+L

745 matches found

CNVD
CNVD
added 2022/03/17 12:0 a.m.43 views

Samsung Weather application hijacking vulnerability

Samsung Weather application is an application for Samsung mobile devices that is used to obtain weather forecast information.A hijacking vulnerability exists in Samsung Weather application, which stems from an unauthorized access A local attacker could use this vulnerability to perform unauthoriz...

4.6CVSS7.2AI score0.001EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/03/10 5:47 p.m.7 views

CVE-2022-25815

PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...

7.8CVSS7.1AI score0.001EPSS
SaveExploits0References2
OSV
OSV
added 2022/03/10 5:47 p.m.8 views

CVE-2022-25815

PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...

7.8CVSS5.8AI score0.001EPSS
SaveExploits0References1
NVD
NVD
added 2022/03/10 5:47 p.m.29 views

CVE-2022-25815

PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...

7.8CVSS0.001EPSS
SaveExploits0References1
Prion
Prion
added 2022/03/10 5:47 p.m.25 views

Spoofing

PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...

4.6CVSS7.3AI score0.001EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.10 views

Samsung Weather application 安全漏洞

Samsung Weather application is an application for Samsung mobile devices that is used to obtain weather forecast information.A hijacking vulnerability exists in Samsung Weather application, which stems from an unauthorized access A local attacker could use this vulnerability to perform unauthoriz...

7.8CVSS5.5AI score0.001EPSS
SaveExploits0References3
CVE
CVE
added 2022/03/08 1:46 p.m.92 views

CVE-2022-25815

The CVE-2022-25815 entry corresponds to a PendingIntent hijacking vulnerability in the Samsung Weather application. Connected sources confirm a local privilege/unauthorized action risk via hijacking PendingIntent in Weather prior to SMR Mar-2022 Release 1. Impacts are described as enabling local ...

7.8CVSS7.3AI score0.001EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/03/08 1:46 p.m.38 views

CVE-2022-25815

PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...

5.5CVSS7.6AI score0.001EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/28 9:15 a.m.5 views

CVE-2021-24864

The WP Cloudy, weather plugin WordPress plugin before 4.4.9 does not escape the postid parameter before using it in a SQL statement in the admin dashboard, leading to a SQL Injection issue...

8.8CVSS7.4AI score0.01221EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/02/28 9:15 a.m.5 views

CVE-2021-24864

The WP Cloudy, weather plugin WordPress plugin before 4.4.9 does not escape the postid parameter before using it in a SQL statement in the admin dashboard, leading to a SQL Injection issue...

8.8CVSS7.3AI score0.01221EPSS
SaveExploits1References3
NVD
NVD
added 2022/02/28 9:15 a.m.20 views

CVE-2021-24864

The WP Cloudy, weather plugin WordPress plugin before 4.4.9 does not escape the postid parameter before using it in a SQL statement in the admin dashboard, leading to a SQL Injection issue...

8.8CVSS0.01221EPSS
SaveExploits1References2
CVE
CVE
added 2022/02/28 9:6 a.m.104 views

CVE-2021-24864

CVE-2021-24864 affects WP Cloudy (WordPress plugin) prior to 4.4.9. The issue is a SQL injection in the admin dashboard caused by not escaping the post_id parameter before using it in an SQL statement. Impact: potential unauthorized access/modification via the admin interface. Affected: WP Cloudy...

8.8CVSS9AI score0.01221EPSS
SaveExploits1References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.10 views

WordPress TK Event Weather plugin <= 1.6.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress TK Event Weather plugin versions = 1.6.6. Solution No patched version available...

3.7AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.17 views

WordPress TK Event Weather plugin <= 1.6.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress TK Event Weather plugin versions = 1.6.6. Solution No patched version available...

2.1AI score
SaveExploits0References2Affected Software1
Microsoft KB
Microsoft KB
added 2022/02/15 12:0 a.m.11 views

February 15, 2022—KB5010414 (OS Build 22000.527) Preview

None None...

6.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2022/01/18 12:0 a.m.348 views

OpenBMCS 2.4 - Information Disclosure

Exploit Title: OpenBMCS 2.4 - Information Disclosure Exploit Author: LiquidWorm Date: 26/10/2021 OpenBMCS 2.4 Secrets Disclosure Vendor: OPEN BMCS Product web page: https://www.openbmcs.com Affected version: 2.4 Summary: Building Management & Controls System BMCS. No matter what the size of your...

5.3AI score
SaveExploits0
Akamai Blog
Akamai Blog
added 2021/11/17 2:0 p.m.20 views

RTL Nederland Makes Weather Forecasting Fast, Reliable and Sustainable with Help From Akamai

Media giant RTL Nederland offers a weather app that gives users the ability to get a comprehensive overview of the weather in their location at the click of a button. Akamai is delighted that this exciting media brand has chosen us to deliver a rich and engaging web experience for its viewers whi...

6.9AI score
SaveExploits0
OSV
OSV
added 2021/11/12 10:15 p.m.6 views

CVE-2021-3720

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro L79031 and Legion Phone2 Pro L70081 that could allow other applications to access device GPS data...

5.5CVSS5.8AI score0.00212EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/12 10:15 p.m.18 views

CVE-2021-3720

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro L79031 and Legion Phone2 Pro L70081 that could allow other applications to access device GPS data...

5.5CVSS0.00212EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/11/12 10:15 p.m.10 views

CVE-2021-3720

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro L79031 and Legion Phone2 Pro L70081 that could allow other applications to access device GPS data...

5.5CVSS6AI score0.00212EPSS
SaveExploits0References2
Rows per page
Query Builder