CVE-2024-34679

Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege...

CVE-2024-34679

CVE-2024-34679 affects Crane; versions prior to SMR Nov-2024 Release 1 are vulnerable due to incorrect default permissions, permitting local attackers to access files with the phone privilege. The issue is documented across multiple feeds (Red Hat, NVD, CNVD, etc.) and is addressed by updating Cr...

CVE-2024-34679

Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege...

CVE-2024-34678

Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption...

CVE-2024-34678

Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption...

CVE-2024-34678

CVE-2024-34678: An out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 enables local attackers to cause memory corruption. Affected software is Samsung Mobile devices (libsapeextractor.so component). Impact per sources is memory corruption with local access required; no use...

CVE-2024-34677

Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious apps appear as legitimate...

CVE-2024-34677

CVE-2024-34677 relates to a vulnerability in Samsung Mobile’s System UI prior to the SMR Nov-2024 Release 1. The issue enables local attackers to exploit a flaw in System UI to disclose sensitive information and to cause malicious apps to appear legitimate. The publicly documented affected compon...

CVE-2024-34676

Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption. User interaction is required for triggering this vulnerability...

CVE-2024-34676

Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption. User interaction is required for triggering this vulnerability...

PT-2024-33512 · Unknown · Settings Suggestions

Name of the Vulnerable Software and Affected Versions: Settings Suggestions versions prior to SMR Nov-2024 Release 1 Description: The issue is related to improper input validation in Settings Suggestions, allowing local attackers to launch privileged activities. This could potentially lead to loc...

PT-2024-26101 · Wlantest · Wlantest

Name of the Vulnerable Software and Affected Versions: WlanTest versions prior to SMR Nov-2024 Release 1 Description: The issue allows local attackers to obtain sensitive information due to the use of implicit intent for sensitive communication in WlanTest. Recommendations: For versions prior to...

PT-2024-26098 · Systemui · Systemui

Name of the Vulnerable Software and Affected Versions: System UI versions prior to SMR Nov-2024 Release 1 Description: The issue allows local attackers to expose sensitive information and make malicious apps appear as legitimate. This is achieved by exploiting a flaw in the System UI...

CVE-2023-32189

Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys...

CVE-2023-32189 Insecure handling SSH key in SUSE Manager when bootstrapping new clients

Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys...

CVE-2023-32189

CVE-2023-32189 affects SUSE Manager (bootstrapping new clients) through insecure handling of SSH keys, enabling local attackers to access the keys. The issue is tied to SUSE Manager Server deployments; exploitation details are not described in the provided docs. Remediation is indicated by the SU...

PT-2024-29130 · Lenovo · Lenovo Super File

Name of the Vulnerable Software and Affected Versions: Lenovo Super File affected versions not specified Description: A DLL hijack vulnerability was reported that could allow a local attacker to execute code with elevated privileges. Recommendations: At the moment, there is no information about a...

Lenovo Lock Screen 安全漏洞

Lenovo Lock Screen is a lock screen application from the Chinese company Lenovo Lenovo. A security vulnerability exists in Lenovo Lock Screen. A local attacker could exploit the vulnerability to elevate privileges and execute code...

CVE-2024-34670

Use of implicit intent for sensitive communication in Sound Assistant prior to version 6.1.0.9 allows local attackers to get sensitive information...

CVE-2024-34671

Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability...