Lucene search
+L

1092 matches found

Cvelist
Cvelist
added 2025/02/27 2:7 a.m.21 views

CVE-2025-21714 RDMA/mlx5: Fix implicit ODP use after free

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP use after free Prevent double queueing of implicit ODP mr destroy work by using xacmpxchg to make sure this is the only time we are destroying this specific mr. Without this change, we could try to...

7.8CVSS0.00196EPSS
SaveExploits0References3
CVE
CVE
added 2025/02/27 2:7 a.m.149 views

CVE-2025-21714

CVE-2025-21714 : Linux kernel RDMA/mlx5: fix implicit ODP use after free. The issue could lead to invalidating the MR twice, queuing MR destroy work twice, and a race where the second work runs after the first freed MR, causing a user-after-free and refcount underflow. The fix uses __xa_cmpxchg()...

7.8CVSS6.6AI score0.00196EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/06 12:39 a.m.8 views

CVE-2022-30756

Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of Finder...

8.5CVSS6.8AI score0.00134EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 12:34 a.m.12 views

CVE-2022-30754

Implicit Intent hijacking vulnerability in AppLinker prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of AppLinker...

8.5CVSS6.8AI score0.00134EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/04 8:15 a.m.5 views

CVE-2025-20896

Use of implicit intent for sensitive communication in EasySetup prior to version 11.1.18 allows local attackers to access sensitive information...

5.5CVSS5.8AI score0.00131EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/04 7:19 a.m.60 views

CVE-2025-20896

CVE-2025-20896 affects EasySetup prior to version 11.1.18. The vulnerability arises from use of implicit intents for sensitive communication, enabling local attackers to access sensitive information (confidentiality impact HIGH per NVD metrics). Affected software is Samsung EasySetup; remediation...

5.5CVSS6.9AI score0.00131EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/02/04 12:0 a.m.7 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices, which stems from an issue in EasySetup that contains sensitive communications using implici...

5.5CVSS6.6AI score0.00131EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/01 12:0 a.m.24 views

ASB-A-356117796

In AppTimeSpentPresenter of AppTimeSpentPreference.kt, there is a possible way to hijack implicit intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.3AI score
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2025/01/09 4:15 a.m.11 views

CVE-2025-0306

A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service...

7.4CVSS7AI score0.00649EPSS
SaveExploits0References2
NVD
NVD
added 2024/12/03 6:15 a.m.23 views

CVE-2024-49416

Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information...

5.5CVSS0.00134EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/03 6:15 a.m.5 views

CVE-2024-49417

Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

3.3CVSS5.8AI score0.00144EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/03 6:15 a.m.14 views

CVE-2024-49417

Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

3.3CVSS0.00144EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/03 6:15 a.m.7 views

CVE-2024-49416

Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information...

5.5CVSS5.8AI score0.00134EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/03 5:48 a.m.9 views

CVE-2024-49417

Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

2CVSS6.8AI score0.00144EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/03 5:48 a.m.51 views

CVE-2024-49417

CVE-2024-49417 affects Samsung Smart Touch Call prior to 1.0.0.8. The issue is caused by the use of an implicit intent for sensitive communications, which can allow a local attacker to launch privileged activities. User interaction is required to trigger the vulnerability. Documents consistently ...

3.3CVSS3.7AI score0.00144EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/03 5:47 a.m.7 views

CVE-2024-49416

Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information...

4CVSS6.9AI score0.00134EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/03 5:47 a.m.60 views

CVE-2024-49416

CVE-2024-49416 concerns Samsung SmartThings prior to version 1.8.21, where an implicit intent used for sensitive communication can leak information to a local attacker. The vulnerability is described across multiple sources (NVD, Red Hat, CVE listings) with a consistent impact: exposure of sensit...

5.5CVSS4.3AI score0.00134EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/12/03 5:47 a.m.24 views

CVE-2024-49416

Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information...

4CVSS0.00134EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/03 12:0 a.m.7 views

PT-2024-33527

Name of the Vulnerable Software and Affected Versions Smart Touch Call versions prior to 1.0.0.8 Description The use of implicit intent for sensitive communication in Smart Touch Call allows local attackers to launch privileged activities. User interaction is required to trigger this issue...

3.3CVSS6.2AI score0.00144EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/12/03 12:0 a.m.6 views

SAMSUNG Smart Touch Call 安全漏洞

SAMSUNG Smart Touch Call is a smart call application from the South Korean company Samsung SAMSUNG. Lets the user know immediately that a call is spam, blocks the call, and then lets the user report the call. A security vulnerability exists in versions prior to SAMSUNG Smart Touch Call 1.0.0.8 th...

2CVSS6.2AI score0.00144EPSS
SaveExploits0References1
Rows per page
Query Builder