111665 matches found
CVE-2026-20998
CVE-2026-20998 concerns Samsung Smart Switch; an improper authentication flaw in versions prior to 3.7.69.15 allows remote attackers to bypass authentication. Affected product: Samsung Smart Switch (data migration tool). Root cause: improper authentication check. Impact: attackers could gain unau...
CVE-2026-20998
Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication...
CVE-2026-20998
Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication...
CVE-2026-20998
Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication...
CVE-2026-20997
Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication...
CVE-2026-20992
Improper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to disable configuring the background data usage of application...
CVE-2026-20992
Improper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to disable configuring the background data usage of application...
CVE-2026-20992
Summary of disclosed details: The connected advisories indicate an improper authorization in Settings prior to SMR Mar-2026 Release 1, enabling a local attacker to disable the configuration of background data usage. The NCSC advisory confirms this family of fixes for Google Android and Samsung Mo...
CVE-2026-20992
Improper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to disable configuring the background data usage of application...
CVE-2026-20991
Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows local privileged attackers to reuse trial contents...
CVE-2026-20989
EUVD-2026-12295 and PT-2026-25594 describe improper verification of cryptographic signatures in Font Settings prior to SMR Mar-2026 Release 1, allowing physical attackers to load a custom font. Root cause: insufficient signature verification for font assets. The NC SC advisory confirms Google And...
CVE-2026-20988
Improper verification of intent by broadcast receiver in Settings prior to SMR Mar-2026 Release 1 allows local attacker to launch arbitrary activity with Settings privilege. User interaction is required for triggering this vulnerability...
PT-2026-25593
Improper verification of intent by broadcast receiver in Settings prior to SMR Mar-2026 Release 1 allows local attacker to launch arbitrary activity with Settings privilege. User interaction is required for triggering this vulnerability...
Apache IoTDB Improper Input Validation Vulnerability
Apache IoTDB is an open source time series database developed by Apache Software Foundation for large-scale time series data storage and analysis in IoT scenarios. Apache IoTDB suffers from an improper input validation vulnerability. The vulnerability arises because the system does not perform...
PT-2026-25597
Improper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to disable configuring the background data usage of application...
PT-2026-25738
Serviio PRO 1.8 contains an improper access control vulnerability in the Configuration REST API that allows unauthenticated attackers to change the mediabrowser login password. Attackers can send specially crafted requests to the REST API endpoints to modify credentials without authentication...
EulerOS 2.0 SP11 : proftpd (EulerOS-SA-2026-1615)
According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental...
CityData CityChat 安全漏洞
CityData CityChat is a community communication platform developed by the CityData company in the United States. Versions of CityData CityChat prior to 0.12.6 have a security vulnerability. This vulnerability stems from improper handling of the credentials.json file located in the...