857 matches found
MAL-2022-7063 Malicious code in weather-power-up (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a4fa4b856ba13413f1fa2757b592c0b5988dd18bd051989b3ca22ee0f975fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1843 Malicious code in cat-weather-widget (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e88ace5963f5686d2f51198d181864c25de04bd9fa46139da3ecf262068144c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cat-weather-widget (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e88ace5963f5686d2f51198d181864c25de04bd9fa46139da3ecf262068144c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-28780
Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather without permission. The patch adds proper protection to prevent access to location information...
CVE-2022-28780
Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather without permission. The patch adds proper protection to prevent access to location information...
CVE-2022-28780
Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather without permission. The patch adds proper protection to prevent access to location information...
Improper access control
Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather without permission. The patch adds proper protection to prevent access to location information...
CVE-2022-28780
Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather without permission. The patch adds proper protection to prevent access to location information...
CVE-2022-28780
CVE-2022-28780 concerns an improper access control in the Weather feature prior to Samsung SMR May-2022 Release 1, enabling unauthorized access to location information set in Weather. The issue is mitigated by a patch that adds proper protection to prevent access to location data. Connected docum...
Samsung SMR 安全漏洞
Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in Samsung SMR that stems from an improper access control vulnerability in Weather. An attacker exploits the vulnerability to gain unauthorized acce...
CVE-2022-28780: Improper Access Control
Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather without permission. The patch adds proper protection to prevent access to location information...
PT-2022-19228
Name of the Vulnerable Software and Affected Versions Weather versions prior to SMR May-2022 Release 1 Description The issue concerns an improper access control vulnerability that allows attackers to access location information set in Weather without permission. This vulnerability can be exploite...
Samsung Weather application hijacking vulnerability
Samsung Weather application is an application for Samsung mobile devices that is used to obtain weather forecast information.A hijacking vulnerability exists in Samsung Weather application, which stems from an unauthorized access A local attacker could use this vulnerability to perform unauthoriz...
CVE-2022-25815
PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...
CVE-2022-25815
PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...
CVE-2022-25815
PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...
Spoofing
PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...
Samsung Weather application 安全漏洞
Samsung Weather application is an application for Samsung mobile devices that is used to obtain weather forecast information.A hijacking vulnerability exists in Samsung Weather application, which stems from an unauthorized access A local attacker could use this vulnerability to perform unauthoriz...
CVE-2022-25815
The CVE-2022-25815 entry corresponds to a PendingIntent hijacking vulnerability in the Samsung Weather application. Connected sources confirm a local privilege/unauthorized action risk via hijacking PendingIntent in Weather prior to SMR Mar-2022 Release 1. Impacts are described as enabling local ...
CVE-2022-25815
PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...