CVE-2023-21427

Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without user recognition...

CVE-2023-21419

CVE-2023-21419 describes an issue in Samsung Secure Folder where improper implementation logic can cause the Secure Folder container to remain unlocked under certain conditions. Affected software: Secure Folder on Samsung devices (prior to SMR Jan-2023 Release 1). Root cause: implementation flaw ...

CVE-2023-21423

Improper authorization vulnerability in ChnFileShareKit prior to SMR Jan-2023 Release 1 allows attacker to control BLE advertising without permission using unprotected action...

CVE-2023-21427

Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without user recognition...

CVE-2023-21421

Improper Handling of Insufficient Permissions or Privileges vulnerability in KnoxCustomManagerService prior to SMR Jan-2023 Release 1 allows attacker to access device SIM PIN...

CVE-2023-21420

Use of Externally-Controlled Format String vulnerabilities in STST TA prior to SMR Jan-2023 Release 1 allows arbitrary code execution...

CVE-2023-21430

An out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR JAN-2023 Release 1 allows attacker to cause memory access fault...

CVE-2023-21421

CVE-2023-21421 concerns the KnoxCustomManagerService on Samsung devices prior to the SMR Jan-2023 Release 1. The issue arises from improper handling of insufficient permissions or privileges, enabling a local attacker with low privileges to access the device’s SIM PIN. The red flags indicate a lo...

CVE-2023-21419

An improper implementation logic in Secure Folder prior to SMR Jan-2023 Release 1 allows the Secure Folder container remain unlocked under certain condition...

CVE-2023-21423

CVE-2023-21423 affects Samsung ChnFileShareKit prior to SMR Jan-2023 Release 1. The root cause is improper authorization, enabling an attacker to control BLE advertising without permission via an unprotected action. Impact is described as local control with confidentiality and integrity implicati...

CVE-2023-21427

CVE-2023-21427 affects Samsung NfcTile prior to SMR Jan-2023 Release 1. The issue is an improper access control that could allow an attacker to use NFC without user recognition. Affected software is NfcTile with versions before the Jan-2023 release; root cause is insufficient access control on NF...

CVE-2023-21429

Vulnerable component: Samsung ePDG. Issue stems from improper usage of implicit intent in ePDG prior to SMR JAN-2023 Release 1, enabling an attacker to access the SSID. Impact is limited to local access (per CVSS) with low confidentiality impact as described in the sources. Remediation: apply Sam...

CVE-2023-21424

The CVE-2023-21424 issue affects SemChameleonHelper prior to SMR Jan-2023 Release 1, due to improper handling of insufficient permissions/privileges. An attacker could modify network-related values, network code, carrier ID and operator brand. Impact is limited to local context with low base metr...

CVE-2023-21425

Improper access control vulnerability in telecom application prior to SMR JAN-2023 Release 1 allows local attackers to get sensitive information...

CVE-2023-21422

The CVE-2023-21422 entry relates to Samsung’s WifiSevice, where the function semAddPublicDnsAddr allows binding the WifiService to set a custom DNS server without permission. Affected are WifiSevice versions prior to SMR Jan-2023 Release 1. The root cause is improper authorization in semAddPublic...

CVE-2023-21428

CVE-2023-21428 affects TelephonyUI prior to SMR Jan-2023 Release 1. The issue is due to improper input validation, allowing an attacker to configure Preferred Call. The patch reportedly removes unused code. Impact per available data includes local access with low to moderate severity (I/L, A/N). ...

CVE-2023-21430

Consolidated details show CVE-2023-21430 affects libSDKRecognitionText.spensdk.samsung.so (Samsung) for software prior to SMR JAN-2023 Release 1. Root cause is an out-of-bounds read in the mapToBuffer function that can cause a memory access fault. Impact descriptions in sources indicate memory ac...

indiacosmetics.com Cross Site Scripting vulnerability OBB-3172326

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Lexmark Printer Brute-Force Protection Bypass Vulnerability (Jan 2023)

Multiple Lexmark printer devices are prone to a brute-force protection bypass vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...

Oracle HTTP Server (Jan 2023 CPU)

The version of Oracle HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the Jan 2023 CPU advisory. - Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Centralized Thirdparty Jars Expat. The supported version tha...