Lucene search
+L

857 matches found

osv_mal
osv_mal
•added 2022/06/20 8:15 p.m.•15 views

MAL-2022-7063 Malicious code in weather-power-up (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a4fa4b856ba13413f1fa2757b592c0b5988dd18bd051989b3ca22ee0f975fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2022/06/20 6:36 a.m.•11 views

MAL-2022-1843 Malicious code in cat-weather-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e88ace5963f5686d2f51198d181864c25de04bd9fa46139da3ecf262068144c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 6:36 a.m.•8 views

Malicious code in cat-weather-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e88ace5963f5686d2f51198d181864c25de04bd9fa46139da3ecf262068144c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
NVD
NVD
•added 2022/05/03 8:15 p.m.•37 views

CVE-2022-28780

Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather without permission. The patch adds proper protection to prevent access to location information...

5.5CVSS0.00095EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/05/03 8:15 p.m.•11 views

CVE-2022-28780

Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather without permission. The patch adds proper protection to prevent access to location information...

5.5CVSS6.1AI score0.00095EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/05/03 8:15 p.m.•14 views

CVE-2022-28780

Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather without permission. The patch adds proper protection to prevent access to location information...

5.5CVSS5.8AI score0.00095EPSS
SaveExploits0References1
Prion
Prion
•added 2022/05/03 8:15 p.m.•31 views

Improper access control

Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather without permission. The patch adds proper protection to prevent access to location information...

2.1CVSS5.3AI score0.00095EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/05/03 7:39 p.m.•44 views

CVE-2022-28780

Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather without permission. The patch adds proper protection to prevent access to location information...

5CVSS5.6AI score0.00095EPSS
SaveExploits0References1
CVE
CVE
•added 2022/05/03 7:39 p.m.•81 views

CVE-2022-28780

CVE-2022-28780 concerns an improper access control in the Weather feature prior to Samsung SMR May-2022 Release 1, enabling unauthorized access to location information set in Weather. The issue is mitigated by a patch that adds proper protection to prevent access to location data. Connected docum...

5.5CVSS5.3AI score0.00095EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/05/03 12:00 a.m.•21 views

Samsung SMR 安全漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in Samsung SMR that stems from an improper access control vulnerability in Weather. An attacker exploits the vulnerability to gain unauthorized acce...

5.5CVSS5.8AI score0.00095EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/03 12:00 a.m.•8 views

CVE-2022-28780: Improper Access Control

Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather without permission. The patch adds proper protection to prevent access to location information...

5.5CVSS6AI score0.00095EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/05/03 12:00 a.m.•8 views

PT-2022-19228

Name of the Vulnerable Software and Affected Versions Weather versions prior to SMR May-2022 Release 1 Description The issue concerns an improper access control vulnerability that allows attackers to access location information set in Weather without permission. This vulnerability can be exploite...

5.5CVSS0.00095EPSS
SaveExploits0References4
CNVD
CNVD
•added 2022/03/17 12:00 a.m.•54 views

Samsung Weather application hijacking vulnerability

Samsung Weather application is an application for Samsung mobile devices that is used to obtain weather forecast information.A hijacking vulnerability exists in Samsung Weather application, which stems from an unauthorized access A local attacker could use this vulnerability to perform unauthoriz...

4.6CVSS7.2AI score0.001EPSS
SaveExploits0
NVD
NVD
•added 2022/03/10 5:47 p.m.•36 views

CVE-2022-25815

PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...

7.8CVSS0.001EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/10 5:47 p.m.•17 views

CVE-2022-25815

PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...

7.8CVSS7.1AI score0.001EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/03/10 5:47 p.m.•18 views

CVE-2022-25815

PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...

7.8CVSS5.8AI score0.001EPSS
SaveExploits0References1
Prion
Prion
•added 2022/03/10 5:47 p.m.•31 views

Spoofing

PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...

4.6CVSS7.3AI score0.001EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/03/10 12:00 a.m.•21 views

Samsung Weather application 安全漏洞

Samsung Weather application is an application for Samsung mobile devices that is used to obtain weather forecast information.A hijacking vulnerability exists in Samsung Weather application, which stems from an unauthorized access A local attacker could use this vulnerability to perform unauthoriz...

7.8CVSS5.5AI score0.001EPSS
SaveExploits0References3
CVE
CVE
•added 2022/03/08 1:46 p.m.•101 views

CVE-2022-25815

The CVE-2022-25815 entry corresponds to a PendingIntent hijacking vulnerability in the Samsung Weather application. Connected sources confirm a local privilege/unauthorized action risk via hijacking PendingIntent in Weather prior to SMR Mar-2022 Release 1. Impacts are described as enabling local ...

7.8CVSS7.3AI score0.001EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/03/08 1:46 p.m.•52 views

CVE-2022-25815

PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...

5.5CVSS7.6AI score0.001EPSS
SaveExploits0References1
Rows per page
Query Builder