12570 matches found
CVE-2026-21113
Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission...
CVE-2026-21113
CVE-2026-21113 is an improper export of Android application components in Samsung VisualVoicemail prior to version 20.1.00.05 . The flaw allows local attackers with low privileges to initiate a call without proper permission , resulting in low impacts to confidentiality, integrity, and availabili...
EUVD-2026-74654
Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission...
CVE-2026-21113
Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission...
CVE-2026-21108
Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information...
CVE-2026-21108
Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information...
EUVD-2026-74649
Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information...
CVE-2026-21108
CVE-2026-21108 is an improper export of Android application components in Bixby Touch prior to version 4.3.01.17 . The flaw allows a local attacker with no prior privileges and no user interaction to access sensitive information , resulting in a high confidentiality impact . Samsung Mobile rates ...
CVE-2026-21113: Improper Export of Android Application Components
Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission...
CVE-2026-21108: Improper Export of Android Application Components
Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information...
PT-2026-88842
Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information...
PT-2026-89027
Snipe-IT before 8.7.0 fails to properly enforce the viewKeys authorization gate in CSV export and API index endpoints, allowing authenticated users with only licenses.view permission to access product keys. Attackers can download all license keys in bulk via CSV export or validate candidate keys...
CVE-2026-86758: Observable Response Discrepancy
Snipe-IT before 8.7.0 fails to properly enforce the viewKeys authorization gate in CSV export and API index endpoints, allowing authenticated users with only licenses.view permission to access product keys. Attackers can download all license keys in bulk via CSV export or validate candidate keys...
CVE-2026-86742: Improper Neutralization of Formula Elements in a CSV File
Snipe-IT through 8.6.3 does not neutralize formula elements in the "unaccepted assets" acceptance report CSV export. ReportsController::postAssetAcceptanceReport builds the CSV by hand stripping commas and joining rows manually and, unlike the six sibling exports in the same controller, never...
PT-2026-88847
Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission...
CVE-2026-87809: Authorization Bypass Through User-Controlled Key
Siyuan before v3.8.2 fails to apply publish-access filtering to embedded blocks before rendering in the /api/export/preview and /api/lute/copyStdMarkdown endpoints. Attackers with reader access can retrieve the full rendered content of private, hidden, or publish-disabled blocks by accessing publ...
kernel: vfio/pci: Check BAR resources before exporting a DMABUF
A flaw was found in the Linux kernel's vfio/pci subsystem. This vulnerability occurs because the Direct Memory Access Buffer DMABUF export mechanism does not adequately verify if Base Address Register BAR resources are properly reserved before allowing access. A local attacker could exploit this ...
CVE-2026-86441
Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation information. Several organisation-related widgets did not honor Security.hideorganisationindexfromusers. As a result, authenticated users without the permsharinggroup permission...
Malicious code in dog-water-double-sudo-export (npm)
Source: amazon-inspector 906ddf53c560d51aa1c3e031e98c594086bb6c439d83f948122cda4fc8f6ccd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...