Lucene search
+L

7056 matches found

OSV
OSV
added 2022/03/10 5:46 p.m.12 views

CVE-2022-24929

Unprotected Activity in AppLock prior to SMR Mar-2022 Release 1 allows attacker to change the list of locked app without authentication...

3.3CVSS5.8AI score0.00101EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/10 5:46 p.m.13 views

CVE-2022-24929

Unprotected Activity in AppLock prior to SMR Mar-2022 Release 1 allows attacker to change the list of locked app without authentication...

4.1CVSS5.8AI score0.00101EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.8 views

Samsung Lock and mask apps setting 授权问题漏洞

Samsung Lock and mask apps setting is a secure application from Samsung South Korea. It is used to block apps or lock apps. A security vulnerability exists in Samsung Lock and mask apps setting that allows an attacker to change the enable/disable settings without authentication...

4.6CVSS5.2AI score0.00109EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.12 views

SAMSUNG Wear Os 安全漏洞

Samsung Wear Os is a version of the Android operating system from Samsung South Korea, designed for wearable computer devices such as smartwatches. Designed for wearable computer devices such as smartwatches, an access control error vulnerability exists in StRetailModeReceiver in Samsung Wear Os ...

4.4CVSS5.7AI score0.00429EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.7 views

Samsung AppLock 安全漏洞

Samsung AppLock is an application lock for Samsung mobile devices used to lock applications on Android.An authorization issue vulnerability exists in Samsung AppLock, which stems from a lack of authentication measures or insufficient authentication strength for Unprotected Activity in AppLock. An...

4.1CVSS5.6AI score0.00101EPSS
SaveExploits0References2
Qualys Blog
Qualys Blog
added 2022/03/08 10:20 p.m.89 views

March 2022 Patch Tuesday: Microsoft Releases 92 Vulnerabilities with 3 Critical; Adobe Releases 3 Advisories, 6 Vulnerabilities with 5 Critical.

Microsoft Patch Tuesday Summary Microsoft has fixed 92 vulnerabilities, including 21 Microsoft Edge vulnerabilities, in the March 2022 update, with three 3 classified as Critical as they allow Remote Code Execution RCE. This months Patch Tuesday release includes fixes for three 3 publicly disclos...

9CVSS8.8AI score0.40028EPSS
SaveExploits3
ATTACKERKB
ATTACKERKB
added 2022/03/08 9:49 p.m.6 views

CVE-2022-27855

Cross-Site Request Forgery CSRF vulnerability in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress allows Plugin Settings Change...

5.4CVSS4.9AI score0.00258EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2022/03/08 1:46 p.m.93 views

CVE-2022-25816

CVE-2022-25816 affects Samsung Lock and Mask apps setting prior to the SMR Mar-2022 Release 1, where improper authentication allows an attacker to change enable/disable without authentication. The initial entry documents this vulnerability and notes Samsung and Red Hat/other vendor advisories ali...

4.6CVSS4.8AI score0.00109EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/03/08 1:46 p.m.26 views

CVE-2022-25816

Improper authentication in Samsung Lock and mask apps setting prior to SMR Mar-2022 Release 1 allows attacker to change enable/disable without authentication...

4.1CVSS5.2AI score0.00109EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/03/08 1:46 p.m.37 views

CVE-2022-24929

Unprotected Activity in AppLock prior to SMR Mar-2022 Release 1 allows attacker to change the list of locked app without authentication...

4.1CVSS4.7AI score0.00101EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2022/03/08 12:0 a.m.30 views

KLA12476 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A security feature bypass vulnerability in Microsoft Intune Portal for iOS can be...

7.8CVSS7.5AI score0.02412EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/03/08 12:0 a.m.11 views

Citrix Virtual Apps and Desktops 安全漏洞

Citrix Systems Citrix Virtual Apps and Desktops is a virtualization software from Citrix Systems that provides virtual desktops and virtual applications for any operating system. A security vulnerability exists in Citrix Virtual Apps and Desktops, which can be exploited by an attacker to bypass...

4.4CVSS6AI score0.00173EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/03/08 12:0 a.m.9 views

PT-2022-17550 · Samsung · Bixbytouch

Name of the Vulnerable Software and Affected Versions: BixbyTouch versions prior to 2.2.00.6 Description: The issue is related to improper access control, allowing untrusted applications to load arbitrary URL and local files in webview. Recommendations: For versions prior to 2.2.00.6, update to...

4CVSS3.9AI score0.00234EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/03/08 12:0 a.m.8 views

PT-2022-16992 · Google · Wear Os

Name of the Vulnerable Software and Affected Versions: Wear OS version 3.0 prior to Firmware update MAR-2022 Release Description: The issue is related to an improper access control vulnerability in the StRetailModeReceiver component. This vulnerability allows untrusted applications to reset defau...

4.4CVSS3.8AI score0.00429EPSS
SaveExploits0References3
HackRead
HackRead
added 2022/03/07 7:39 p.m.23 views

Fake Antivirus Apps on Play Store Loaded with SharkBot Banking Trojan

By Deeba Ahmed The SharkBot trojan was found in four fake antivirus apps on Google Play Store collectively boasting 57,000 downloads.… This is a post from HackRead.com Read the original post: Fake Antivirus Apps on Play Store Loaded with SharkBot Banking Trojan...

1.8AI score
SaveExploits0
Citrix
Citrix
added 2022/03/07 12:0 a.m.218 views

Citrix Federated Authentication Service (FAS) Security Update

An issue has been identified in Citrix Federated Authentication Service FAS which causes deployments that have been configured to store a registration authority certificate's private key in a Trusted Platform Module TPM to incorrectly store that key in the Microsoft Software Key Storage Provider...

4.4CVSS5.3AI score0.00173EPSS
SaveExploits0
Packet Storm
Packet Storm
added 2022/02/28 12:0 a.m.309 views

Axis IP Camera Shell Upload

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Axis IP Camera Application Upload', 'Description' = %q This module exploits the "Apps" feature in Axis IP cameras. The feature allows third party...

0.5AI score
SaveExploits0
The Hacker News
The Hacker News
added 2022/02/26 10:19 a.m.36 views

Social Media Hijacking Malware Spreading Through Gaming Apps on Microsoft Store

A new malware capable of controlling social media accounts is being distributed through Microsoft's official app store in the form of trojanized gaming apps, infecting more than 5,000 Windows machines in Sweden, Bulgaria, Russia, Bermuda, and Spain. Israeli cybersecurity company Check Point dubbe...

1AI score
SaveExploits0
OSV
OSV
added 2022/02/25 7:15 p.m.9 views

CVE-2021-37103

There is an improper permission management vulnerability in the Wallet apps. Successful exploitation of this vulnerability may affect service confidentiality...

5.5CVSS6.1AI score0.00152EPSS
SaveExploits0References1
NVD
NVD
added 2022/02/25 7:15 p.m.36 views

CVE-2021-37103

There is an improper permission management vulnerability in the Wallet apps. Successful exploitation of this vulnerability may affect service confidentiality...

5.5CVSS0.00152EPSS
SaveExploits0References1
Rows per page
Query Builder