Lucene search
+L

332 matches found

OSV
OSV
added 2022/02/11 6:15 p.m.12 views

CVE-2022-24000

PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent...

3.3CVSS5.8AI score0.00116EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/11 6:15 p.m.4 views

CVE-2022-23999

PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent...

3.9CVSS5.4AI score0.00116EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/11 6:15 p.m.7 views

CVE-2022-24000

PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent...

3.9CVSS5.4AI score0.00116EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/02/11 12:00 a.m.8 views

Samsung KnoxPrivacyNoticeReceiver 输入验证错误漏洞

Samsung SettingsReceiver is a component in Samsung Samsung mobile devices. Samsung SettingsReceiver suffers from a PendingIntent hijacking vulnerability that originates from unauthorized access in SettingsReceiver, which can be exploited by a local attacker to gain unauthorized access to media...

7.1CVSS5.6AI score0.001EPSS
SaveExploits0References2
OSV
OSV
added 2022/01/21 11:52 p.m.40 views

GHSA-VV38-4XCJ-Q4RW Cross-site Scripting in Apache Knox SSO

When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing. A request that included a specially crafted request parameter could be used to redirect the user to a page controlled by an attacker. This URL would need to be...

6.1CVSS6.3AI score0.02579EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/01/21 11:52 p.m.53 views

Cross-site Scripting in Apache Knox SSO

When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing. A request that included a specially crafted request parameter could be used to redirect the user to a page controlled by an attacker. This URL would need to be...

6.1CVSS1.1AI score0.02579EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2022/01/21 12:00 a.m.20 views

Samsung Knox Guard Execution Error Vulnerability

Samsung Knox Guard is a security solution based on the open-source Android platform from South Korea's Samsung Samsung, which can comprehensively enhance security through a combination of physical means and software systems, and is perfectly compatible with the Android and Google ecosystems,...

6.1CVSS6.7AI score0.00112EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/01/18 12:00 a.m.38 views

Apache Knox SSO Cross-Site Scripting Vulnerability

Knox Sso is the Apache Foundation's Web Ui Sso Single Sign-On feature for your cluster. A security vulnerability exists in Apache Knox SSO that stems from a URL parsing error that could craft requests to redirect users to a malicious page. A request containing a specially crafted request paramete...

6.1CVSS5.9AI score0.02579EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/17 8:15 p.m.36 views

CVE-2021-42357

When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing. A request that included a specially crafted request parameter could be used to redirect the user to a page controlled by an attacker. This URL would need to be...

6.1CVSS0.02579EPSS
SaveExploits0References2
OSV
OSV
added 2022/01/17 8:15 p.m.19 views

CVE-2021-42357

When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing. A request that included a specially crafted request parameter could be used to redirect the user to a page controlled by an attacker. This URL would need to be...

6.1CVSS5.8AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/01/17 8:15 p.m.9 views

CVE-2021-42357

When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing. A request that included a specially crafted request parameter could be used to redirect the user to a page controlled by an attacker. This URL would need to be...

6.1CVSS5.7AI score0.02579EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2022/01/17 8:15 p.m.25 views

Design/Logic Flaw

When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing. A request that included a specially crafted request parameter could be used to redirect the user to a page controlled by an attacker. This URL would need to be...

4.3CVSS5.9AI score0.02579EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/01/17 7:25 p.m.36 views

CVE-2021-42357 DOM based XSS Vulnerability in Apache Knox

When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing. A request that included a specially crafted request parameter could be used to redirect the user to a page controlled by an attacker. This URL would need to be...

6.1AI score0.02579EPSS
SaveExploits0References2
CVE
CVE
added 2022/01/17 7:25 p.m.127 views

CVE-2021-42357

CVE-2021-42357 affects Apache Knox SSO prior to 1.6.1. The issue arises from improper URL parsing, allowing a crafted request parameter to redirect users to an attacker-controlled page. Practical impact described across sources is a user-facing redirect that would need exposure outside the normal...

6.1CVSS5.9AI score0.02579EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/01/17 12:00 a.m.11 views

Apache Knox SSO 跨站脚本漏洞

Knox Sso is the Apache Foundation's Web Ui Sso Single Sign-On feature for your cluster. A security vulnerability exists in Apache Knox SSO that stems from a URL parsing error that could craft requests to redirect users to a malicious page. A request containing a specially crafted request paramete...

6.1CVSS5.4AI score0.02579EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:12 p.m.12 views

CVE-2022-22268

Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to temporary unlock the Knox Guard via Samsung DeX mode...

6.1CVSS6.4AI score0.00112EPSS
SaveExploits0References2
OSV
OSV
added 2022/01/10 2:12 p.m.9 views

CVE-2022-22268

Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to temporary unlock the Knox Guard via Samsung DeX mode...

6.1CVSS5.8AI score0.00112EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/10 2:12 p.m.28 views

CVE-2022-22268

Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to temporary unlock the Knox Guard via Samsung DeX mode...

6.1CVSS0.00112EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/10 2:12 p.m.29 views

Information disclosure

Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to temporary unlock the Knox Guard via Samsung DeX mode...

3.6CVSS6.3AI score0.00112EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/01/10 12:00 a.m.11 views

Samsung SMR安全漏洞

Samsung Knox Guard is a security solution based on the open-source Android platform from South Korea's Samsung Samsung, which can comprehensively enhance security through a combination of physical means and software systems, and is perfectly compatible with the Android and Google ecosystems,...

6.1CVSS5.7AI score0.00112EPSS
SaveExploits0References2
Rows per page
Query Builder