Lucene search
+L

1323 matches found

Positive Technologies
Positive Technologies
•added 2022/12/08 12:00 a.m.•19 views

PT-2022-25109 · Google · Android +1

Name of the Vulnerable Software and Affected Versions: Calendar versions prior to 11.6.08.0 in Android Q10 Calendar versions prior to 12.2.11.3000 in Android R11 Calendar versions prior to 12.3.07.2000 in Android S12 Calendar versions prior to 12.4.02.0 in Android T13 Description: The issue is...

5.5CVSS5.2AI score0.00301EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/08 12:00 a.m.•2 views

CVE-2022-39915: Improper Access Control

Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q10, 12.2.11.3000 in Android R11, 12.3.07.2000 in Android S12, and 12.4.02.0 in Android T13 allows attackers to access sensitive information via implicit intent...

5.5CVSS5.7AI score0.00301EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/08 12:00 a.m.•5 views

CVE-2022-39895: Improper Access Control

Improper access control vulnerability in ContactListUtils in Phone prior to SMR Dec-2022 Release 1 allows to access contact group information via implicit intent...

4CVSS5.8AI score0.00118EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/08 12:00 a.m.•6 views

CVE-2022-39905: Improper Authorization

Implicit intent hijacking vulnerability in Telecom application prior to SMR Dec-2022 Release 1 allows attacker to access sensitive information via implicit intent...

5.5CVSS5.8AI score0.00119EPSS
SaveExploits0References2
CVE
CVE
•added 2022/12/08 12:00 a.m.•79 views

CVE-2022-39905

CVE-2022-39905 is an implicit intent hijacking vulnerability in the Samsung Telecom application prior to the SMR-DEC-2022 Release 1. The fault is a misused implicit intent that allows an attacker to access sensitive information via intents, with impact described as confidential data exposure and ...

5.5CVSS5.2AI score0.00119EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/12/08 12:00 a.m.•3 views

PT-2022-25098

Name of the Vulnerable Software and Affected Versions Telecom application versions prior to SMR Dec-2022 Release 1 Description The issue allows an attacker to access sensitive information via implicit intent, which is a part of the Android system that enables applications to request actions from...

5.5CVSS0.00119EPSS
SaveExploits0References3
CVE
CVE
•added 2022/12/08 12:00 a.m.•87 views

CVE-2022-39894

CVE-2022-39894 affects Samsung Phone’s ContactListStartActivityHelper. The issue is an improper access control that can expose sensitive information via an implicit intent in versions prior to the SMR Dec-2022 Release 1. Public sources (NVD/Red Hat/CNNVD/PT-Security) describe the vulnerability as...

4CVSS3.9AI score0.00118EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/12/08 12:00 a.m.•86 views

CVE-2022-39915

CVE-2022-39915 is an improper access control vulnerability in the Samsung Calendar app. It affects Calendar versions prior to: Android Q 11.6.08.0, Android R 12.2.11.3000, Android S 12.3.07.2000, and Android T 12.4.02.0, where an attacker could access sensitive information via implicit intent. Th...

5.5CVSS5.8AI score0.00301EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/10/19 12:00 a.m.•16 views

PT-2022-26886 · Jenkins · Jenkins Pipeline: Groovy Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Pipeline: Groovy Plugin versions 2802.v5ea 628154b c2 and earlier Description: A sandbox bypass issue involves implicit casts by the Groovy language runtime, allowing attackers with permission to define and run sandboxed scripts to...

9.9CVSS9.6AI score0.01474EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2022/10/07 3:15 p.m.•15 views

CVE-2022-39878

Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive information via implicit intent broadcast...

5.5CVSS5.8AI score0.00171EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/10/07 3:15 p.m.•17 views

CVE-2022-39878

Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive information via implicit intent broadcast...

5.5CVSS5.8AI score0.00171EPSS
SaveExploits0References1
NVD
NVD
•added 2022/10/07 3:15 p.m.•33 views

CVE-2022-39878

Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive information via implicit intent broadcast...

5.5CVSS0.00171EPSS
SaveExploits0References1
NVD
NVD
•added 2022/10/07 3:15 p.m.•38 views

CVE-2022-39868

Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast...

7.5CVSS0.00415EPSS
SaveExploits0References1
NVD
NVD
•added 2022/10/07 3:15 p.m.•37 views

CVE-2022-39871

Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts...

7.5CVSS0.00415EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/10/07 3:15 p.m.•21 views

CVE-2022-39871

Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts...

7.5CVSS5.8AI score0.00415EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/10/07 3:15 p.m.•11 views

CVE-2022-39868

Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast...

7.5CVSS5.8AI score0.00415EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/10/07 3:15 p.m.•18 views

CVE-2022-39868

Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast...

7.5CVSS5.8AI score0.00415EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/10/07 3:15 p.m.•27 views

CVE-2022-39871

Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts...

7.5CVSS5.8AI score0.00415EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/10/07 3:15 p.m.•22 views

CVE-2022-39860

Improper access control vulnerability in QuickShare prior to version 13.2.3.5 allows attackers to access sensitive information via implicit broadcast...

3.5CVSS5.8AI score0.002EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/10/07 3:15 p.m.•19 views

CVE-2022-39864

Improper access control vulnerability in WifiSetupLaunchHelper in SmartThings prior to version 1.7.89.25 allows attackers to access sensitive information via implicit intent...

7.5CVSS5.8AI score0.00392EPSS
SaveExploits0References1
Rows per page
Query Builder