Lucene search
+L

2598 matches found

CNNVD
CNNVD
•added 2022/09/09 12:00 a.m.•19 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 6.1.70.20, which stems from Samsung Email containing incorrect access control and...

7.8CVSS7.3AI score0.00186EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/09/09 12:00 a.m.•18 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Sep-2022 Release 1 version, which originates from Photo Editor containing intent redirection...

7.5CVSS7.3AI score0.00226EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/09/09 12:00 a.m.•16 views

PT-2022-23675 · Samsung · Samsung Pay

Name of the Vulnerable Software and Affected Versions: Samsung Pay versions prior to 5.0.63 for KR and 5.1.47 for Global Description: The issue allows attackers to access files without permission via implicit Intent, exploiting a Pending Intent hijacking vulnerability in NotiCenterUtils...

6.5CVSS6.5AI score0.00173EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/09/09 12:00 a.m.•20 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices version 5.1.47 for international and version 5.0.63 for Korea, which stems from NotiCenterUtils in...

6.5CVSS6.5AI score0.00173EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/09/09 12:00 a.m.•15 views

PT-2022-23676 · Samsung · Samsung Pay

Name of the Vulnerable Software and Affected Versions: Samsung Pay versions prior to 5.0.63 for KR and 5.1.47 for Global Description: The issue allows attackers to access files without permission via implicit Intent, exploiting a Pending Intent hijacking vulnerability in SpayNotification...

6.5CVSS6.4AI score0.00173EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/09 12:00 a.m.•7 views

CVE-2022-36853: Improper Input Validation

Intent redirection in Photo Editor prior to SMR Sep-2022 Release 1 allows attacker to get sensitive information...

7.5CVSS7.3AI score0.00226EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/09 12:00 a.m.•7 views

CVE-2022-36871: Improper Authorization

Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...

6.5CVSS6.7AI score0.00173EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/09 12:00 a.m.•9 views

CVE-2022-36864: Improper Access Control

Improper access control and intent redirection in Samsung Email prior to 6.1.70.20 allows attacker to access specific formatted file and execute privileged behavior...

7.8CVSS7.5AI score0.00186EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/09/09 12:00 a.m.•20 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 2.2.11.22081151, which stems from Waterplugin's GalaxyStoreBridgePageLinker...

6.5CVSS6.5AI score0.00226EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/09/09 12:00 a.m.•19 views

PT-2022-23679 · Unknown · Waterplugin

Name of the Vulnerable Software and Affected Versions: Waterplugin versions prior to 2.2.11.22081151 Description: The issue is related to improper restriction of broadcasting Intent in SaWebViewRelayActivity, allowing an attacker to access files without permission. Recommendations: For versions...

6.6CVSS5.4AI score0.002EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/09/09 12:00 a.m.•19 views

PT-2022-23674 · Samsung · Samsung Pay

Name of the Vulnerable Software and Affected Versions: Samsung Pay versions prior to 5.0.63 for KR and 5.1.47 for Global Description: The issue allows attackers to access files without permission via implicit Intent, exploiting a Pending Intent hijacking vulnerability in...

6.5CVSS6.5AI score0.00176EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/09/09 12:00 a.m.•19 views

PT-2022-23657 · Unknown · Photo Editor

Name of the Vulnerable Software and Affected Versions: Photo Editor versions prior to SMR Sep-2022 Release 1 Description: The issue allows an attacker to obtain sensitive information through intent redirection in the Photo Editor. Recommendations: For versions prior to SMR Sep-2022 Release 1,...

7.5CVSS7.3AI score0.00226EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/09 12:00 a.m.•6 views

CVE-2022-36875: Improper Access Control

Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 allows attacker to access the file without permission...

6.6CVSS6AI score0.002EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/09 12:00 a.m.•9 views

CVE-2022-36872: Improper Authorization

Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...

6.5CVSS6.7AI score0.00173EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/09 12:00 a.m.•6 views

CVE-2022-36870: Improper Authorization

Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...

6.5CVSS6.7AI score0.00176EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/09/09 12:00 a.m.•20 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices version 5.1.47 for international and 5.0.63 for Korea, which stems from MTransferNotificationManager ...

6.5CVSS6.5AI score0.00176EPSS
SaveExploits0References3
Huntr
Huntr
•added 2022/09/07 4:46 a.m.•33 views

UI REDRESSING

Description Clickjacking is a portmanteau of two words ‘click’ and ‘hijacking’. It refers to hijacking user’s click for malicious intent. In it, an attacker embeds the vulnerable site in an transparent iframe in attacker’s own website and overlays it with objects such as button using CSS skills...

6.8CVSS1AI score0.01165EPSS
SaveExploits1References3
CNVD
CNVD
•added 2022/08/18 12:00 a.m.•106 views

Google Chrome Intents security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Intents, which is caused by an untrusted input that does not adequately validate intent and can be exploited by attackers to bypass security restrictions...

6.5CVSS4.8AI score0.0453EPSS
SaveExploits1References1
Huntr
Huntr
•added 2022/08/09 11:54 a.m.•13 views

UI Redressing

Description Clickjacking is a portmanteau of two words ‘click’ and ‘hijacking’. It refers to hijacking user’s click for malicious intent. In it, an attacker embeds the vulnerable site in an transparent iframe in attacker’s own website and overlays it with objects such as button using CSS skills...

1AI score
SaveExploits0References3
OSV
OSV
•added 2022/08/05 4:15 p.m.•17 views

CVE-2022-36835

Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files...

3.3CVSS5.9AI score0.00191EPSS
SaveExploits0References1
Rows per page
Query Builder