CVE-2022-33685

Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access senstive information...

Input validation

Improper input validation vulnerability in BillingPackageInsraller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege...

SAMSUNG Mobile devices KnoxSDK 输入验证错误漏洞

Samsung KnoxSDK is an open source Android platform-based security solution from Samsung Samsung in South Korea that can enhance security across the board through a combination of physical means and software systems, while being perfectly compatible with the Android and Google ecosystems, bringing...

CVE-2022-33708

Improper input validation vulnerability in AppsPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege...

CVE-2022-33704

Improper validation vulnerability in ucmRetParcelable of KnoxSDK prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities...

PT-2022-21820

Name of the Vulnerable Software and Affected Versions KnoxSDK versions prior to SMR Jul-2022 Release 1 Description The issue is related to an improper validation vulnerability in the ucmRetParcelable component of KnoxSDK. This vulnerability allows attackers to launch certain activities...

CVE-2022-33708: Improper Input Validation

Improper input validation vulnerability in AppsPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege...

CVE-2022-33710: Improper Input Validation

Improper input validation vulnerability in BillingPackageInsraller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege...

CVE-2022-33704: Improper Input Validation

Improper validation vulnerability in ucmRetParcelable of KnoxSDK prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities...

JBProjects.sol#createFor(...) function is open to reentrancy attacks

Lines of code Vulnerability details JBProjects.solcreateFor... which used in JPController.sollaunchProjectFor... can be used for reentrancy. PoC contracts/JBProjects.sol: 131: function createForaddress owner, JBProjectMetadata calldatametadata 132 external 133 override 134 returns uint256 project...

Eclipse Equinox 安全漏洞

Eclipse Equinox is a subproject of the Eclipse Foundation that provides certified implementations of the OSGi R4.x Core Framework specification. A security vulnerability exists in Eclipse Equinox that stems from the ability of an installable unit in the p2 module to alter the installation and loc...

HCL Technologies HCL Launch Information Disclosure Vulnerability

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, India. for handling the most complex deployment processes in DevOps. HCL Technologies HCL Launch suffers from an information disclosure vulnerability that stems from storing...

CVE-2022-27548

HCL Launch stores user credentials in plain clear text which can be read by a local user...

CVE-2022-27549

HCL Launch may store certain data for recurring activities in a plain text format...

CVE-2022-27548

HCL Launch stores user credentials in plain clear text which can be read by a local user...

CVE-2022-27549

HCL Launch may store certain data for recurring activities in a plain text format...

Design/Logic Flaw

HCL Launch stores user credentials in plain clear text which can be read by a local user...

Format string

HCL Launch may store certain data for recurring activities in a plain text format...

CVE-2022-27549 HCL Launch could disclose sensitive database information to a local user in plain text.

HCL Launch may store certain data for recurring activities in a plain text format...

CVE-2022-27549

CVE-2022-27549 affects HCL Launch. The vulnerability is an information-disclosure issue where data for recurring activities may be stored in plain text, exposing sensitive information and impacting confidentiality. Reported in multiple sources (NVD entry and CNVD/CNNVD references), with CVSS metr...