Samsung SMR 安全漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in Samsung SMR that originates from improper authorization in TelephonyManager and allows an attacker to gain access to IMSI without the...

CVE-2022-22288

CVE-2022-22288 affects Samsung Galaxy Store; vulnerability is an improper authorization flaw in Galaxy Store prior to version 4.5.36.5 that enables remote installation from the allowlist. Root cause per sources is improper authorization allowing an attacker to trigger installations without proper...

CVE-2022-22288

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist...

CVE-2022-22272

CVE-2022-22272 affects TelephonyManager in Samsung/Android prior to the SMR Jan-2022 Release 1. The issue is improper authorization that allows an attacker to obtain the IMSI without READ_PRIVILEGED_PHONE_STATE permission. Root cause is insufficient access control in TelephonyManager’s handling o...

CVE-2022-22272

Improper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to get IMSI without READPRIVILEGEDPHONESTATE permission...

PT-2022-15332 · Samsung · Galaxy Store

Name of the Vulnerable Software and Affected Versions: Galaxy Store versions prior to 4.5.36.5 Description: The issue is related to an improper authorization vulnerability. It allows for remote app installation from the allowlist. Recommendations: For Galaxy Store versions prior to 4.5.36.5, upda...

PT-2022-15318 · Unknown · Telephonymanager

Name of the Vulnerable Software and Affected Versions: TelephonyManager versions prior to SMR Jan-2022 Release 1 Description: The issue is related to improper authorization in TelephonyManager, allowing attackers to obtain the IMSI without the required READ PRIVILEGED PHONE STATE permission...

GHSA-83X4-9CWR-5487 Improper Authorization in Keycloak

A incorrect authorization flaw was found in Keycloak 12.0.0, the flaw allows an attacker with any existing user account to create new default user accounts via the administrative REST API even where new user registration is disabled...

CVE-2021-3837

openwhyd is vulnerable to Improper Authorization...

CVE-2021-3837

openwhyd is vulnerable to Improper Authorization...

Authorization

openwhyd is vulnerable to Improper Authorization...

CVE-2021-3837

openwhyd is vulnerable to Improper Authorization...

CVE-2021-3837

CVE-2021-3837 affects openwhyd/openwhyd with an Improper Authorization issue in the login flow. The vulnerability arises from insufficient validation of the redirect parameter, which is embedded in the login redirect HTML/JS (htmlRedirect) and can be used to trigger a reflected XSS or redirect-ba...

Improper Authorization in saleor/saleor

Title GraphQL traversal due to missing permission checks Description orders and customers fields allow to access each other via nodes edges. However, connections don't check user's permissions, which allows, for instance, a staff with just Customers permissions get full information about the orde...

Openwhyd 安全漏洞

Openwhyd is a music management service. openwhyd suffers from an authorization issue vulnerability that stems from the fact that openwhyd is vulnerable to improper authorization. No detailed vulnerability details are currently available...

PT-2022-10715 · Openwhyd · Openwhyd

Name of the Vulnerable Software and Affected Versions: openwhyd affected versions not specified Description: The issue concerns Improper Authorization. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where...

CVE-2021-20873

Yappli is an application development platform which provides the function to access a requested URL using Custom URL Scheme. When Android apps are developed with Yappli versions since v7.3.6 and prior to v9.30.0, they are vulnerable to improper authorization in Custom URL Scheme handler, and may ...

CVE-2021-20873

Yappli is an application development platform which provides the function to access a requested URL using Custom URL Scheme. When Android apps are developed with Yappli versions since v7.3.6 and prior to v9.30.0, they are vulnerable to improper authorization in Custom URL Scheme handler, and may ...

CVE-2021-20873

Yappli is an application development platform which provides the function to access a requested URL using Custom URL Scheme. When Android apps are developed with Yappli versions since v7.3.6 and prior to v9.30.0, they are vulnerable to improper authorization in Custom URL Scheme handler, and may ...

Names of private objects are leaked to unauthorized users via the "Move objects" feature - CVE-2021-43948

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0. Affected versions:...