CVE-2024-39323 aimeos/ai-admin-graphql improper access control vulnerability allows an editor to modify admin account

aimeos/ai-admin-graphql is the Aimeos GraphQL API admin interface. Starting in version 2022.04.01 and prior to versions 2022.10.10, 2023.10.6, and 2024.04.6, an improper access control vulnerability allows an editor to modify and take over an admin account in the back end. Versions 2022.10.10,...

CVE-2024-34595

Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities...

CVE-2024-34595

Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities...

CVE-2024-34583

Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier...

CVE-2024-34583

Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier...

CVE-2024-34585

Improper access control in launchApp of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities...

CVE-2024-34586

Improper access control in KnoxCustomManagerService prior to SMR Jul-2024 Release 1 allows local attackers to configure Knox privacy policy...

CVE-2024-20891

Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities...

CVE-2024-20891

Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities...

CVE-2024-20895

Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for calling SDP features...

CVE-2024-20888

Improper access control in OneUIHome prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

CVE-2024-20888

Improper access control in OneUIHome prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

CVE-2024-34595

Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities...

CVE-2024-34595

CVE-2024-34595 concerns Samsung Mobile/SystemUI prior to the SMR Jul-2024 Release 1. The vulnerability is due to improper access control in the clickAdapterItem of SystemUI, enabling a local attacker to launch privileged activities. Impact is described as high with local attack vector and no user...

CVE-2024-34586

The CVE-2024-34586 entry concerns Samsung Knox: Improper access control in KnoxCustomManagerService prior to SMR Jul‑2024 Release 1 may allow a local attacker to configure the Knox privacy policy. Affected software: KnoxCustomManagerService (Samsung mobile devices). Root cause: insufficient acces...

CVE-2024-34585

CVE-2024-34585 concerns improper access control in the Samsung Mobile SystemUI component, specifically the launchApp function. The vulnerability allows a local attacker to launch privileged activities due to insufficient access restrictions in SystemUI before the SMR Jul-2024 Release 1. The relat...

CVE-2024-34583

Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier...

CVE-2024-34583

Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier...

CVE-2024-34583

CVE-2024-34583 concerns improper access control in a system property on Samsung Mobile devices prior to SMR Jul-2024 Release 1. A local attacker could obtain a device identifier (confidentiality impact low). Connected sources indicate updates to fix the issue: Samsung/Android security updates (SM...

CVE-2024-20895

CVE-2024-20895 affects Samsung Mobile devices’ Dar service, where improper access control allows a local attacker to bypass restrictions on calling SDP features. The issue is tied to Dar service prior to SMR Jul-2024 Release 1 and has been addressed by updating to SMR Jul-2024 Release 1 or later....