Lucene search
K

1045 matches found

CNNVD
CNNVD
added 2023/11/07 12:0 a.m.1 views

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to version 14.5.00.7, which stems from a use of implicit intent to handle sensitive...

6.5CVSS6.7AI score0.00168EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/11/07 12:0 a.m.4 views

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices due to an implicit intent hijacking vulnerability in the Firewall application module. The vulnerabili...

4.4CVSS6.6AI score0.00072EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/11/07 12:0 a.m.2 views

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices version 14.5.00.7, which stemmed from a Use Implicit Intent to Handle...

6.5CVSS6.8AI score0.00229EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/11/07 12:0 a.m.2 views

PT-2023-28415 · Samsung · Samsung Account

Name of the Vulnerable Software and Affected Versions: Samsung Account versions prior to 14.5.00.7 Description: The issue concerns the use of implicit intent for sensitive communication in the startMandatoryCheckActivity function within Samsung Account. This allows attackers to access arbitrary...

6.5CVSS6.5AI score0.00229EPSS
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2023/11/06 8:0 a.m.2 views

NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authorization block can sometimes be used for unauthenticated access even when the intention of the configuration was for each user to have an account. The earliest affected version is 2.2.0.

...

6.5CVSS6.7AI score0.00259EPSS
Exploits0
OSV
OSV
added 2023/10/30 5:15 p.m.1 views

DEBIAN-CVE-2023-47090

NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authorization block can sometimes be used for unauthenticated access, even when the intention of the configuration was for each user to have an account. The earliest affected version is...

6.5CVSS6.8AI score0.00259EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/10/30 5:15 p.m.1 views

CVE-2023-47090

NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authorization block can sometimes be used for unauthenticated access, even when the intention of the configuration was for each user to have an account. The earliest affected version is...

6.5CVSS5.8AI score0.00259EPSS
Exploits0References4
OSV
OSV
added 2023/10/30 5:15 p.m.1 views

AZL-35301 CVE-2023-47090 affecting package telegraf for versions less than 1.29.4-1

NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authorization block can sometimes be used for unauthenticated access, even when the intention of the configuration was for each user to have an account. The earliest affected version is...

6.5CVSS6.7AI score0.00259EPSS
Exploits0References1
Prion
Prion
added 2023/10/30 5:15 p.m.12 views

Authentication flaw

NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authorization block can sometimes be used for unauthenticated access, even when the intention of the configuration was for each user to have an account. The earliest affected version is...

4CVSS6.6AI score0.00259EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2023/10/30 5:15 p.m.0 views

UBUNTU-CVE-2023-47090

NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authorization block can sometimes be used for unauthenticated access, even when the intention of the configuration was for each user to have an account. The earliest affected version is...

6.5CVSS7.1AI score0.00259EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2023/10/30 12:0 a.m.18 views

CVE-2023-47090

NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authorization block can sometimes be used for unauthenticated access, even when the intention of the configuration was for each user to have an account. The earliest affected version is...

6.5CVSS6.8AI score0.00259EPSS
Exploits0References4
Veracode
Veracode
added 2023/10/23 3:28 a.m.10 views

Authentication Bypass

github.com/nats-io/nats-server is vulnerable to Authentication Bypass. The vulnerability occurs when the only account added is the system account $SYS. In this scenario, the nats-server creates an implicit user in $G and designates it as the noauthuser account. This effectively enables the same...

6.8AI score
Exploits0
Positive Technologies
Positive Technologies
added 2023/10/19 12:0 a.m.2 views

PT-2023-30299 · Nats +1 · Nats Nats-Server +1

Name of the Vulnerable Software and Affected Versions: NATS nats-server versions 2.2.0 through 2.9.22 NATS nats-server versions 2.10.0 through 2.10.1 Description: The issue is related to an authentication bypass in NATS nats-server. An implicit $G user in an authorization block can sometimes be...

6.5CVSS6.5AI score0.00259EPSS
Exploits0References27
OSV
OSV
added 2023/10/04 4:15 a.m.0 views

CVE-2023-30734

Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit intent...

5.5CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2023/10/04 4:15 a.m.0 views

CVE-2023-30737

Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit intent...

5.5CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2023/10/04 4:15 a.m.13 views

CVE-2023-30734

Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit intent...

5.5CVSS4.5AI score0.00086EPSS
Exploits0References1
NVD
NVD
added 2023/10/04 4:15 a.m.18 views

CVE-2023-30737

Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit intent...

5.5CVSS4.5AI score0.00086EPSS
Exploits0References1
Prion
Prion
added 2023/10/04 4:15 a.m.14 views

Improper access control

Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit intent...

1.7CVSS5.3AI score0.00086EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2023/10/04 4:15 a.m.20 views

Improper access control

Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit intent...

1.7CVSS5.3AI score0.00086EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/04 3:2 a.m.9 views

CVE-2023-30737

Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit intent...

4CVSS6.7AI score0.00086EPSS
Exploits0References1
Rows per page
Query Builder