PT-2025-35664

Name of the Vulnerable Software and Affected Versions: SemClipboard versions prior to SMR Apr-2023 Release 1 Description: An improper access control issue exists in SemClipboard. This allows attackers to read arbitrary files with system permission. Recommendations: Update SemClipboard to SMR...

PT-2025-35662

Name of the Vulnerable Software and Affected Versions: SLocation versions prior to SMR Apr-2022 Release 1 Description: An improper access control issue exists in SLocation. Local attackers can obtain device location information by leveraging the com.samsung.android.wifi.GEOFENCE action...

PT-2025-35691

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.30.63 Description: Improper access control in Samsung Notes allows physical attackers to access data across multiple user profiles. User interaction is required to trigger this issue. Recommendations: Updat...

PT-2025-35687

Name of the Vulnerable Software and Affected Versions: ContactProvider versions prior to SMR Sep-2025 Release 1 Description: Improper access control in ContactProvider allows local attackers to access sensitive information. Recommendations: Update ContactProvider to SMR Sep-2025 Release 1 or late...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Apr-2023 Release 1, which stems from improper access control and could...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Sep-2025 Release 1, which stems from improper access control and could...

PT-2025-35675

Name of the Vulnerable Software and Affected Versions: Galaxy Store versions prior to 4.5.53.6 Description: An improper access control issue exists in Galaxy Store. A local attacker can access protected data by exploiting an exported service. Recommendations: Update Galaxy Store to version 4.5.53...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Sep-2025 Release 1 prior to Release 1, which stems from improper access control and coul...

PT-2025-35663

Name of the Vulnerable Software and Affected Versions: SLocation versions prior to SMR Apr-2022 Release 1 Description: An improper access control issue exists in SLocation. Local attackers can obtain device location information by utilizing the com.samsung.android.wifi.NETWORK LOCATION action...

SAMSUNG Galaxy Store 安全漏洞

SAMSUNG Galaxy Store is an application store by Samsung South Korea. A security vulnerability exists in SAMSUNG Galaxy Store versions prior to 4.5.53.6, which stems from improper access control and could lead to a local attacker accessing protected data using the export service...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Apr-2022 Release 1 prior to Release 1, which stems from improper access control and coul...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Sep-2025 Release 1, which stems from improper access control and could...

PT-2025-35661

Name of the Vulnerable Software and Affected Versions: Telephony versions prior to SMR Apr-2023 Release 1 Description: An improper access control issue exists in Telephony. This allows attackers to access files with escalated permission. Recommendations: Update Telephony to SMR Apr-2023 Release 1...

WordPress plugin Makeaholic 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

SAMSUNG Calendar 安全漏洞

SAMSUNG Calendar is a calendar module from Samsung South Korea. A security vulnerability exists in SAMSUNG Calendar prior to version 12.5.06.5 and prior to version 12.6.01.12, which stems from improper access control and could allow a physical attacker to access multi-user profile data...

PT-2025-35679

Name of the Vulnerable Software and Affected Versions: MARsExemptionManager versions prior to SMR Sep-2025 Release 1 Description: Improper access control in MARsExemptionManager allows local attackers to be excluded from background execution management. Recommendations: Update MARsExemptionManage...

CVE-2025-55373

Incorrect access control in Beakon Application before v5.4.3 allows authenticated attackers with low-level privileges to escalate privileges and execute commands with Administrator rights...

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to improper access control due to the Apache Commons package (CVE-2025-48734)

Summary Apache Commons is used by DataStage on Cloud Pak for Data as part of Java utility functionality. Vulnerability Details CVEID:CVE-2025-48734 DESCRIPTION: Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used t...

Security Bulletin: An unspecified vulnerability in Java SE related to the Server, which affects IBM watsonx.data

Summary An unspecified vulnerability in Java SE related to the Server: DDL component could allow a remote attacker to cause high confidentiality and high integrity impact. These can affect watsonx.data. Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in Java S...

CVE-2025-43773

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.18 and 7.4 GA through update 92 has a security vulnerability that allowing for improp...