2812 matches found
CVE-2022-39906
Improper access control vulnerability in SecTelephonyProvider prior to SMR Dec-2022 Release 1 allows attackers to access message information...
PT-2022-25095 · Samsung · Exynos
Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR DEC-2022 Release 1 Description: The issue concerns improper authorization, allowing a remote attacker to obtain sensitive information, including the IMEI, via an emergency call. Recommendations: For...
SAMSUNG Mobile devices 授权问题漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR DEC-2022 Release 1 prior versions, which stems from incorrect Exynos authentication...
PT-2022-25100 · Samsung · Samsung Decoding Library
Name of the Vulnerable Software and Affected Versions: Samsung decoding library versions prior to SMR Dec-2022 Release 1 Description: The issue is related to an integer overflow in the Samsung decoding library, specifically affecting the handling of video thumbnails. This allows a local attacker ...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR DEC-2022 Release 1 prior to Release 1, which stems from improper Exynos authorization...
PT-2022-25089 · Contacts · Contacts
Name of the Vulnerable Software and Affected Versions: Contacts versions prior to SMR Dec-2022 Release 1 Description: The issue allows access to sensitive information via implicit intent due to improper access control. Recommendations: For versions prior to SMR Dec-2022 Release 1, update to SMR...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Dec-2022 Release 1, which stems from an incorrect access control vulnerability in...
CVE-2022-39905
Implicit intent hijacking vulnerability in Telecom application prior to SMR Dec-2022 Release 1 allows attacker to access sensitive information via implicit intent...
PT-2022-25093 · Unknown · Nice Catch
Name of the Vulnerable Software and Affected Versions: Nice Catch versions prior to SMR Dec-2022 Release 1 Description: The issue is related to improper access control, allowing physical attackers to access the contents of all toast generated in the application installed in Secure Folder through...
SAMSUNG Mobile devices 输入验证错误漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Dec-2022 Release 1, which stems from an integer overflow vulnerability in the...
CVE-2022-39896
Improper access control vulnerabilities in Contacts prior to SMR Dec-2022 Release 1 allows to access sensitive information via implicit intent...
CVE-2022-4261: Rapid7 Nexpose Update Validation Issue (FIXED)
On November 14, 2022, Rapid7's product engineering team discovered that the mechanism in Nexpose and InsightVM used to validate the source of an update file was unreliable. This failure, which involved the internal cryptographic validation of received updates, was designated as CVE-2022-4261, and...
CVE-2022-46742
creationtimestamp| type| source ---|---|--- 2022-12-07 12:24:51+00:00| seen| https://t.me/cibsecurity/54118 2025-04-22 22:04:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12996...
CVE-2022-38123
creationtimestamp| type| source ---|---|--- 2022-12-06 18:41:15+00:00| seen| https://t.me/cibsecurity/54067...
viyama.de Cross Site Scripting vulnerability OBB-3088360
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
espertecartomanti.net Cross Site Scripting vulnerability OBB-3086511
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Pixel Update Bulletin—December2022Stay organized with collectionsSave and categorize content based on your preferences.
The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2022-12-05 or later address all issues in this bulletin and all issues in the December 2022 Android...
helpfulholidays.co.uk Cross Site Scripting vulnerability OBB-3085898
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
getitfree.us Cross Site Scripting vulnerability OBB-3085811
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
hornandantler.com Cross Site Scripting vulnerability OBB-3085562
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...