CVE-2023-42545

Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data...

CVE-2023-42545

Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data...

CVE-2023-42545

Summary: CVE-2023-42545 concerns the Android Phone application using an implicit intent for sensitive communication, enabling potential access to location data. Affected software/versions (from provided details): Android 11 prior to 12.7.20.12; Android 12 includes 13.1.48 and 13.5.28; Android 13 ...

MAL-2023-8469 Malicious code in react-18-viem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ab3496e80f456724e73563a2fef64ff6928d569e6e730832dd7de084aa0b3655 The OpenSSF Package Analysis project identified 'react-18-viem' @ 0.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8468 Malicious code in vanillajs-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19dd1596da1181577937a6d843a7fe1b41a9bb73029d7ecbd4c33e406ad73062 The OpenSSF Package Analysis project identified 'vanillajs-test' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

CVE-2023-41036

Macvim is a text editor for MacOS. Prior to version 178, Macvim makes use of an insecure interprocess communication IPC mechanism which could lead to a privilege escalation. Distributed objects are a concept introduced by Apple which allow one program to vend an interface to another program. What...

ALSA-2023:6578 Moderate: libqb security update

The libqb packages provide a library with the primary purpose of providing high performance client/server reusable features, such as high performance logging, tracing, inter-process communication, and polling. Security Fixes: libqb: Buffer overflow in logblackbox.c CVE-2023-39976 For more details...

Moderate: libqb security update

The libqb packages provide a library with the primary purpose of providing high performance client/server reusable features, such as high performance logging, tracing, inter-process communication, and polling. Security Fixes: libqb: Buffer overflow in logblackbox.c CVE-2023-39976 For more details...

PT-2023-28414 · Samsung · Samsung Account

Name of the Vulnerable Software and Affected Versions: Samsung Account versions prior to 14.5.00.7 Description: The issue concerns the use of implicit intent for sensitive communication in the startEmailValidationActivity function within Samsung Account. This allows attackers to access arbitrary...

Mitsubishi Electric GOT and Tension Controller (CVE-2021-20589)

Buffer access with incorrect length value vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.38.000, GT25 model communication driver versions 01.19.000 through 01.38.000, GT23 model communication driver versions 01.19.000 through 01.38.000 and GT21 model...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from information disclosure in the Qualcomm IPC when reading values from shared memory in a VM...

PT-2023-28413 · Samsung · Samsung Account

Name of the Vulnerable Software and Affected Versions: Samsung Account versions prior to 14.5.00.7 Description: The issue concerns the use of implicit intent for sensitive communication in the startAgreeToDisclaimerActivity function within Samsung Account. This allows attackers to access arbitrar...

ALSA-2023:6482 Moderate: librabbitmq security update

The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fixes: rabbitmq-c/librabbitmq: Insecure credentials submission CVE-2023-35789 For more details about the security issue...

CVE-2022-48193

Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...

CVE-2022-48193

Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...

CVE-2022-48193

Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...

Code injection

Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...

PT-2023-15612 · Softing · Smartlink Sw-Ht

Name of the Vulnerable Software and Affected Versions: Softing smartLink SW-HT versions prior to 1.30 Description: The issue concerns the use of weak ciphers during secure communication via SSL in the affected software. This could potentially compromise the security of the communication...

Macvim Security Vulnerabilities

Vim is a cross-platform text editor. A security vulnerability exists in previous versions of Macvim 178 that stems from the use of an insecure inter-process communication mechanism, which may lead to privilege escalation...

Malicious code in mux-spaces-broadcast-layouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01c1c36f1f5a800c8875fff926e7201ac81769be7b9484aa1360c3cb2118ae00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...