CVE-2020-11606: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with Q10.0 software. Information about application preview in the Secure Folder leaks on a locked device. The Samsung ID is SVE-2019-16463 April 2020...

CVE-2018-21068: Improper Input Validation

An issue was discovered on Samsung mobile devices with O8.0 software. Execution of an application in a locked Secure Folder can occur without a password via a split screen. The Samsung ID is SVE-2018-11669 July 2018...

PT-2020-12722

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with Q10.0 software Description An issue was discovered where information about application preview in the Secure Folder leaks on a locked device. Recommendations For Samsung mobile devices with Q10.0 software, at the...

PT-2020-8685

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software Description An issue allows access to the Gallery in the Secure Folder without authentication. Recommendations For Samsung mobile devices with O8.x software, at the moment, there is no information abou...

PT-2020-8706

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N7.x software Samsung mobile devices with O8.x software Description An issue allows an attacker to view Streams content, such as a Gallery slideshow, of a locked Secure Folder on a Samsung mobile device when biometr...

PT-2020-8712

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.0 software Description An issue allows execution of an application in a locked Secure Folder without a password via a split screen. Recommendations For Samsung mobile devices with O8.0 software, consider disablin...

PT-2020-12717

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P9.0 and Q10.0 software Description An issue allows unauthorized access to applications in the Secure Folder via floating icons. Recommendations For Samsung mobile devices with P9.0 software, update to a version tha...

PT-2020-8682

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N7.x software Description An issue was discovered that allows authentication bypass in the Secure Folder app's startup logic. Recommendations For Samsung mobile devices with N7.x software, consider disabling the...

PT-2020-8700

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software Description An issue was discovered where the Smartwatch displays Secure Folder Notification content on Samsung mobile devices. Recommendations For Samsung mobile devices with O8.x software, consider...

CVE-2020-11601: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. There is unauthorized access to applications in the Secure Folder via floating icons. The Samsung ID is SVE-2019-16195 April 2020...

CVE-2018-21041: Missing Authentication for Critical Function

An issue was discovered on Samsung mobile devices with O8.x software. Access to Gallery in the Secure Folder can occur without authentication. The Samsung ID is SVE-2018-13057 December 2018...

CVE-2020-7613

clamscan through 1.2.0 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the isclamavbinary function located within Index.js. It should be noted that this vulnerability requires a pre-requisite that a folder should be created with the same command that wil...

CVE-2020-7613

clamscan through 1.2.0 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the isclamavbinary function located within Index.js. It should be noted that this vulnerability requires a pre-requisite that a folder should be created with the same command that wil...

Unspecified vulnerability in CIPPlanner CIPAce (CNVD-2020-21817)

CIPPlanner CIPAce is a suite of business process automation and application development platforms from the US-based CIPPlanner. A security vulnerability exists in CIPPlanner CIPAce version 9.1 Build 2019092801. An attacker can exploit the vulnerability by sending an API request to obtain the uplo...

CVE-2020-11595

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and obtain the upload folder path that includes the hostname in a UNC path...

Path traversal

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and obtain the upload folder path that includes the hostname in a UNC path...

CVE-2020-11595

An unauthenticated attacker can invoke the CIPPlanner CIPAce 9.1 Build 2019092801 API and obtain an upload folder path that reveals the hostname in a UNC path, indicating information disclosure via the API endpoint handling uploads. Affected product: CIPPlanner CIPAce (9.1, build 2019092801). Roo...

CVE-2020-11595

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and obtain the upload folder path that includes the hostname in a UNC path...

PT-2020-12711

Name of the Vulnerable Software and Affected Versions CIPPlanner CIPAce version 9.1 Build 2019092801 Description An issue allows an unauthenticated attacker to make an API request to obtain the upload folder path, which includes the hostname in a UNC path. Recommendations For CIPPlanner CIPAce...

CVE-2020-11595: Undefined Security Weakness

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and obtain the upload folder path that includes the hostname in a UNC path...