CVE-2024-34671

Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability...

CVE-2024-34671

Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability...

CVE-2024-34671

Summary: CVE-2024-34671 affects Samsung Internet prior to 26.0.3.1. The issue is the use of implicit intents for sensitive translation-related communication, which can allow a local attacker to obtain sensitive information. User interaction is required to trigger exploitation. Affected software: ...

CVE-2024-34670

Use of implicit intent for sensitive communication in Sound Assistant prior to version 6.1.0.9 allows local attackers to get sensitive information...

CVE-2024-34670

CVE-2024-34670 affects Samsung Sound Assistant prior to version 6.1.0.9, where an issue with implicit intents for sensitive communication could let a local attacker obtain sensitive information. The exposed component/interaction is the misuse of implicit intents within Sound Assistant, and the ri...

CVE-2024-34670

Use of implicit intent for sensitive communication in Sound Assistant prior to version 6.1.0.9 allows local attackers to get sensitive information...

CVE-2024-34671: Undefined Security Weakness

Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability...

CVE-2024-34670: Undefined Security Weakness

Use of implicit intent for sensitive communication in Sound Assistant prior to version 6.1.0.9 allows local attackers to get sensitive information...

CVE-2024-38425

Information disclosure while sending implicit broadcast containing APP launch information...

CVE-2024-38425 Improper Authorization in Performance

Information disclosure while sending implicit broadcast containing APP launch information...

CVE-2024-38425

Technical details about CVE-2024-38425 are not publicly available in the provided documents. The descriptions mention information disclosure via implicit app-launch broadcasts but do not specify affected products, versions, vectors, or fixes. Monitor for updates.

Qualcomm Chipsets security vulnerabilities

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from an information disclosure when sending an implicit broadcast containing app launch information...

CVE-2024-38425: Improper Authorization

Information disclosure while sending implicit broadcast containing APP launch information...

PT-2024-26091

Name of the Vulnerable Software and Affected Versions Sound Assistant versions prior to 6.1.0.9 Description The issue concerns the use of implicit intent for sensitive communication in Sound Assistant, allowing local attackers to obtain sensitive information. Recommendations For versions prior to...

PT-2024-26092

Name of the Vulnerable Software and Affected Versions Samsung Internet versions prior to 26.0.3.1 Description The issue concerns the use of implicit intent for sensitive communication in translation, allowing local attackers to obtain sensitive information. User interaction is required to trigger...

PT-2024-27996 · Qualcomm · Snapdragon +22

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns information disclosure when sending an implicit broadcast that contains app launch details. This implies a potential leak of sensitiv...

PHP OpenSSL Private Decrypt Marvin Attack

The vulnerability of the opensslprivatedecrypt function in the PKCS1 Padding Handler component of the PHP programming language interpreter is related to the use of an OpenSSL version that does not include the changes required by the RSAPKCS1IMPLICITREJECTION request. Exploiting this vulnerability...

GHSA-4CRF-28C7-V4GR Openshift Console insufficient entropy vulnerability

An insufficient entropy vulnerability was found in the Openshift Console. In the authorization code type and implicit grant type, the OAuth2 protocol is vulnerable to a Cross-Site Request Forgery CSRF attack if the state parameter is used inefficiently. This flaw allows logging into the victim’s...

CVE-2024-6508: Insufficient Entropy

An insufficient entropy vulnerability was found in the Openshift Console. In the authorization code type and implicit grant type, the OAuth2 protocol is vulnerable to a Cross-Site Request Forgery CSRF attack if the state parameter is used inefficiently. This flaw allows logging into the victim’s...

Red Hat OpenShift security feature vulnerabilities

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying, and running applications. A security vulnerability exists in Red Hat OpenShift that stems from the OAuth2 protocol being vulnerable to cross-site request forge...