Lucene search
+L

14 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-42316

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00412EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-48485

Malicious code in bioql PyPI...

5.5CVSS5.8AI score0.00133EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:34 p.m.•15 views

CVE-2022-39871

Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts...

7.5CVSS7.3AI score0.00412EPSS
SaveExploits0References1
OSV
OSV
•added 2023/09/27 3:19 p.m.•17 views

CVE-2023-44126

The vulnerability is that the Call management "com.android.server.telecom" app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers,...

5.5CVSS5.8AI score0.00133EPSS
SaveExploits0References1
NVD
NVD
•added 2023/09/27 3:19 p.m.•26 views

CVE-2023-44126

The vulnerability is that the Call management "com.android.server.telecom" app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers,...

5.5CVSS4.4AI score0.00133EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/27 3:19 p.m.•38 views

Design/Logic Flaw

The vulnerability is that the Call management "com.android.server.telecom" app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers,...

1.9CVSS5.4AI score0.00133EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/27 12:00 a.m.•5 views

CVE-2023-44126: Improper Verification of Intent by Broadcast Receiver

The vulnerability is that the Call management "com.android.server.telecom" app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers,...

5.5CVSS6AI score0.00133EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/10/07 3:15 p.m.•22 views

CVE-2022-39871

Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts...

7.5CVSS5.8AI score0.00412EPSS
SaveExploits0References2
OSV
OSV
•added 2022/10/07 3:15 p.m.•16 views

CVE-2022-39871

Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts...

7.5CVSS5.8AI score0.00412EPSS
SaveExploits0References1
NVD
NVD
•added 2022/10/07 3:15 p.m.•28 views

CVE-2022-39871

Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts...

7.5CVSS0.00412EPSS
SaveExploits0References1
Prion
Prion
•added 2022/10/07 3:15 p.m.•29 views

Improper access control

Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts...

5CVSS7.3AI score0.00412EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/10/07 12:00 a.m.•38 views

CVE-2022-39871

Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts...

4CVSS7.5AI score0.00412EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/07 12:00 a.m.•8 views

CVE-2022-39871: Improper Access Control

Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts...

7.5CVSS7.3AI score0.00412EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/10/07 12:00 a.m.•4 views

PT-2022-25063

Name of the Vulnerable Software and Affected Versions SmartThings versions prior to 1.7.89.0 Description The issue is related to an improper access control vulnerability in the cloudNotificationManager.java file. This vulnerability allows attackers to access sensitive information via implicit...

7.5CVSS0.00412EPSS
SaveExploits0References4
Rows per page
Query Builder