CVE-2022-39906: Improper Access Control

Improper access control vulnerability in SecTelephonyProvider prior to SMR Dec-2022 Release 1 allows attackers to access message information...

CVE-2022-39908

CVE-2022-39908 affects Samsung decoding library used for video thumbnails on Samsung Mobile devices prior to SMR Dec-2022 Release 1. The root cause is a TOCTOU condition enabling a local attacker to perform an Out-Of-Bounds Write. Affected component: Samsung decoding library for video thumbnails;...

CVE-2022-39905

CVE-2022-39905 is an implicit intent hijacking vulnerability in the Samsung Telecom application prior to the SMR-DEC-2022 Release 1. The fault is a misused implicit intent that allows an attacker to access sensitive information via intents, with impact described as confidential data exposure and ...

CVE-2022-39906

Impermissible access control in SecTelephonyProvider prior to SMR Dec-2022 Release 1 allows local attackers to access message information. Affected component: SecTelephonyProvider. Root cause: improper access control. Impact: exposure of message information (local access). Remediation: update to ...

CVE-2022-39898

CVE-2022-39898 affects Samsung IIccPhoneBook prior to SMR Dec-2022 Release 1 and is characterized by improper access control that could allow access to some information on the USIM. The vulnerability is documented across multiple feeds (NVD, Red Hat, CVE List) with a common description and a Sams...

CVE-2022-39908

TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write...

CVE-2022-39904

Exposure of Sensitive Information vulnerability in Samsung Settings prior to SMR Dec-2022 Release 1 allows local attackers to access the Network Access Identifier via log...

CVE-2022-39900

CVE-2022-39900 affects Samsung Nice Catch prior to SMR Dec-2022 Release 1. The issue is an improper access control that could allow a physical attacker to access all toast contents generated in the Secure Folder environment via Nice Catch. Affected component: Nice Catch app (Samsung Mobile). Root...

CVE-2022-39904

CVE-2022-39904 affects Samsung Settings on Samsung mobile devices prior to SMR Dec-2022 Release 1. The issue is an information disclosure where the Network Access Identifier is exposed in logs, allowing local attackers to access it. Affected component: Samsung Settings; root cause: log exposure o...

taikou-visa.com Cross Site Scripting vulnerability OBB-3088306

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec.c has a memory leak because of the lack of a dvb_frontend_detach call.

...

CVE-2022-45887

A memory leak issue was found in the Linux kernel media subsystem in the TTUSB DEC driver. It could occur in the ttusbdecexitdvb function because of the lack of a dvbfrontenddetach call. A local user could trigger this flaw by repeatedly plugging and unplugging the device, potentially causing a...

DEBIAN-CVE-2022-45887

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusbdec.c has a memory leak because of the lack of a dvbfrontenddetach call...

UBUNTU-CVE-2022-45887

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusbdec.c has a memory leak because of the lack of a dvbfrontenddetach call...

CVE-2022-45887: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusbdec.c has a memory leak because of the lack of a dvbfrontenddetach call...

CVE-2022-45887

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusbdec.c has a memory leak because of the lack of a dvbfrontenddetach call...

[SECURITY] Fedora 36 Update: xterm-375-1.fc36

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel version 6.0.9 and earlier, which stems from a memory leak caused by the lack of a dvbfrontenddetach call in its...

PT-2022-6860

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 6.0.9 Description An issue in the Linux kernel is related to a memory leak in the drivers/media/usb/ttusb-dec/ttusb dec.c component due to the lack of a dvb frontend detach call. This can potentially allow an...

Ubuntu: Security Advisory (USN-2444-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...