CVE-2024-20898

The CVE-2024-20898 entry concerns Samsung Mobile devices, where the SoftphoneClient component of the IMS service uses implicit intents for sensitive communications. This design allows a local attacker to obtain sensitive information due to the exposure of signals via implicit intents in Softphone...

CVE-2024-20897

CVE-2024-20897 affects the FCM function in Samsung IMS service (pre-SMR Jul-2024 Release 1). The root cause is use of implicit intents for sensitive communications, enabling local attackers to obtain sensitive information. Impact is described as local access leading to information disclosure. Rem...

CVE-2024-20897

Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information...

CVE-2024-20897

Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information...

CVE-2024-20896

CVE-2024-20896 describes a vulnerability in Samsung Mobile devices prior to the SMR Jul-2024 Release 1 where the configuration message uses implicit intents for sensitive communication. The root cause is the handling of implicit intents that can leak sensitive information to local attackers. The ...

CVE-2024-20896

Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information...

CVE-2024-20896

Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices version 4.9.13.0, which stemmed from an improper intent validation issue in...

PT-2024-18809 · Samsung · Samsung Mobile Devices +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue involves the use of implicit intent for sensitive communication in Configuration messages, allowing local attackers to obtain sensitive information. This affects versions prior t...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices prior to SMR Jul-2024 Release 1, which stems from Configuration information Sensitive communication using implicit...

PT-2024-18812 · Ims · Ims

Name of the Vulnerable Software and Affected Versions: IMS service versions prior to SMR Jul-2024 Release 1 Description: The issue concerns the use of implicit intent for sensitive communication in the RCS function of the IMS service, allowing local attackers to obtain sensitive information...

PT-2024-26016 · Samsung · Galaxy Store

Name of the Vulnerable Software and Affected Versions: GalaxyStore versions prior to 4.5.81.0 Description: The issue is related to improper verification of intent by a broadcast receiver in GalaxyStore, allowing local attackers to launch unexported activities of GalaxyStore. Recommendations: For...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices version 4.5.81.0, which stemmed from an improper intent validation issue in...

CVE-2024-0949

Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass. This issue affects Elektraweb: before v17.0.68...

CVE-2024-0949

CVE-2024-0949 affects Talya Informatics’ Elektraweb prior to 17.0.68. The issue is described as Missing Authentication and Use of Hard-coded Credentials that enables Authentication Bypass due to improper access control, potentially exposing files/directories externally and impacting confidentiali...

CVE-2024-0949 Improper Access Control in Talya Informatics' Elektraweb

Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass. This issue affects Elektraweb: before v17.0.68...

Basecamp: Navgraph confusion allows any 3p app to send and read requests from the server at app.hey.com

The vulnerability in the Navgraph system allowed any third-party app to send and read requests from the server at app.hey.com...

Basecamp: Account takeover via insecure intent handling

The Basecamp app was vulnerable to account takeover due to insecure intent handling. A malicious app installed on the same device could obtain the user's Oauth2 token and take over their account...

PT-2024-24328 · Unknown · Com.Solarized.Firedown

Name of the Vulnerable Software and Affected Versions: com.solarized.firedown aka Solarized FireDown Browser & Downloader version 1.0.76 Description: The issue allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. This is possible because...

CVE-2024-20870

Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.71.8 allows local attackers to write arbitrary files with the privilege of Galaxy Store...