Lucene search
+L

7 matches found

Vulnrichment
Vulnrichment
•added 2023/10/30 5:01 p.m.•21 views

CVE-2023-21387

In User Backup Manager, there is a possible way to leak a token to bypass user confirmation for backup due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

6.3AI score0.001EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/04/16 12:00 a.m.•13 views

PT-2023-15693 · Unknown · Bluetooth Module

Name of the Vulnerable Software and Affected Versions: Bluetooth module affected versions not specified Description: The issue concerns a problem with the Bluetooth module where it is possible to bypass user confirmation during the pairing process. This could potentially impact confidentiality...

6.5CVSS6.3AI score0.00197EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/06/07 6:15 p.m.•7 views

CVE-2022-30722

Implicit Intent hijacking vulnerability in Samsung Account prior to SMR Jun-2022 Release 1 allows attackers to bypass user confirmation of Samsung Account...

9.8CVSS5.8AI score0.00258EPSS
SaveExploits0References2
OSV
OSV
•added 2022/06/07 6:15 p.m.•12 views

CVE-2022-30722

Implicit Intent hijacking vulnerability in Samsung Account prior to SMR Jun-2022 Release 1 allows attackers to bypass user confirmation of Samsung Account...

9.8CVSS5.8AI score0.00258EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/07 12:00 a.m.•4 views

CVE-2022-30722: Improper Authorization

Implicit Intent hijacking vulnerability in Samsung Account prior to SMR Jun-2022 Release 1 allows attackers to bypass user confirmation of Samsung Account...

9.8CVSS8.2AI score0.00258EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/06/07 12:00 a.m.•13 views

Samsung Account 安全漏洞

Samsung Account is a mobile account feature for Samsung Samsung mobile devices.An implicit intent hijacking vulnerability exists in Samsung Account. The vulnerability stems from hijacking of non-privileged applications and can be exploited by attackers to bypass user confirmation of Samsung Accou...

9.8CVSS5.6AI score0.00258EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/04/01 12:00 a.m.•3 views

CVE-2015-0812: Undefined Security Weakness

Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations, which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdoma...

4.3CVSS5.7AI score0.01261EPSS
SaveExploits0References2
Rows per page
Query Builder