CVE-2025-46391

CWE-284: Improper Access Control...

Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management

Summary Multiple vulnerabilities were addressed in IBM Application Performance Management 8.1.4.0 IF18 patch Vulnerability Details CVEID:CVE-2025-46392 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons...

CVE-2025-21023

Improper access control in WcsExtension for Galaxy Watch prior to Android Watch 16 allows local attackers to access sensitive information...

CVE-2025-20990

Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier...

CVE-2025-20990

Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier...

CVE-2025-21023

Improper access control in WcsExtension for Galaxy Watch prior to Android Watch 16 allows local attackers to access sensitive information...

CVE-2025-21022

CVE-2025-21022 affects Samsung Galaxy Wearable prior to 2.2.63.25042861. The issue is improper access control that could allow a local attacker to access sensitive information. Affected component is Galaxy Wearable software; root cause is access-control weakness. Mitigation seen in PT-2025-32113 ...

CVE-2025-21012

Improper access control in fall detection for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to modify fall detection configuration...

CVE-2025-21011

Improper access control in SemSensorService for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information related to motion and body sensors...

CVE-2025-20990

Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier...

SAMSUNG WcsExtension Android Watch 安全漏洞

SAMSUNG WcsExtension Android Watch is a hidden component of a Samsung system from Samsung South Korea. A security vulnerability exists in SAMSUNG WcsExtension Android Watch prior to version 16, which stems from improper access control and could allow a local attacker to access sensitive informati...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Aug-2025 Release 1 prior to Release 1, which stems from improper access control and coul...

PT-2025-32157 · Emby · Mediabrowser

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: The software suffers from improper access control. This allows unauthorized access to resources. Recommendations: At the moment, there is no information about a newer version that contains a fix fo...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Aug-2025 Release 1 prior to Release 1, which stems from improper access control of the...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Aug-2025 Release 1, which stems from improper access control and could...

SAMSUNG Galaxy Wearable 安全漏洞

SAMSUNG Galaxy Wearable is used by Samsung South Korea to connect wearable devices to your mobile device. A security vulnerability exists in SAMSUNG Galaxy Wearable prior to version 2.2.63.25042861, which stems from improper access control and could allow a local attacker to access sensitive...

PT-2025-32107 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions 13 through 16 Description: Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 allows local attackers to use privileged APIs. Recommendations: Update to SMR Aug-2025 Release 1 or later...

Exploit for CVE-2025-46018

CVE-2025-46018 – CSC Pay Mobile App Payment Authentication Byp...

MagnusBilling 安全漏洞

MagnusBilling is a fast, secure, efficient and highly available VOIP billing from MagnusSolution Open Source. A security vulnerability exists in MagnusBilling version v7.8.5.3 that stems from improper access control and could lead to elevation of privilege...

Intelbras RX1500和Intelbras RX3000 安全漏洞

The Intelbras RX1500 and Intelbras RX3000 are both routers from Intelbras Brazil. A security vulnerability exists in Intelbras RX1500 version v2.2.9 and Intelbras RX3000 version v1.0.11, which stems from improper access control and could result in access to sensitive information in the router's...