Lucene search
+L

7322 matches found

OSV
OSV
added 2024/04/02 3:15 a.m.4 views

CVE-2024-20850

Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to access information of Samsung Pay...

5.5CVSS5.8AI score0.00147EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/02 3:15 a.m.24 views

CVE-2024-20852

Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows local attackers to access testing configuration...

5.9CVSS5.6AI score0.00135EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/02 3:15 a.m.7 views

CVE-2024-20852

Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows local attackers to access testing configuration...

3.3CVSS5.8AI score0.00135EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/02 3:15 a.m.19 views

CVE-2024-20850

Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to access information of Samsung Pay...

6.2CVSS6.2AI score0.00147EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/02 3:15 a.m.25 views

CVE-2024-20853

Improper verification of intent by broadcast receiver vulnerability in ThemeStore prior to 5.3.05.2 allows local attackers to write arbitrary files to sandbox of ThemeStore...

5.1CVSS5.3AI score0.00152EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/02 3:15 a.m.10 views

CVE-2024-20847

Improper Access Control vulnerability in StorageManagerService prior to SMR Apr-2024 Release 1 allows local attackers to read sdcard information...

3.3CVSS5.8AI score0.00141EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/02 3:15 a.m.26 views

CVE-2024-20849

Out-of-bound Write vulnerability in chunk parsing implementation of libsdffextractor prior to SMR Apr-2023 Release 1 allows local attackers to execute arbitrary code...

7.8CVSS7.3AI score0.00186EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/02 3:15 a.m.22 views

CVE-2024-20847

Improper Access Control vulnerability in StorageManagerService prior to SMR Apr-2024 Release 1 allows local attackers to read sdcard information...

4CVSS4AI score0.00141EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/02 3:15 a.m.28 views

CVE-2024-20848

Improper Input Validation vulnerability in text parsing implementation of libsdffextractor prior to SMR Apr-2024 Release 1 allows local attackers to write out-of-bounds memory...

7.8CVSS4.2AI score0.0016EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/02 3:15 a.m.14 views

CVE-2024-20842

Improper Input Validation vulnerability in handling apdu of libsec-ril prior to SMR Apr-2024 Release 1 allows local privileged attackers to write out-of-bounds memory...

6.7CVSS4.3AI score0.0016EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/02 2:59 a.m.64 views

CVE-2024-20854

The CVE-2024-20854 issue affects Samsung Camera on Android, caused by improper handling of insufficient privileges. Affected are Samsung Camera versions prior to 12.1.0.31 on Android 12, 13.1.02.07 on Android 13, and 14.0.01.06 on Android 14. Local attackers could access image data due to this pr...

5.9CVSS6.5AI score0.00138EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/04/02 2:59 a.m.26 views

CVE-2024-20854

Improper handling of insufficient privileges vulnerability in Samsung Camera prior to versions 12.1.0.31 in Android 12, 13.1.02.07 in Android 13, and 14.0.01.06 in Android 14 allows local attackers to access image data...

5.9CVSS5.8AI score0.00138EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/02 2:59 a.m.14 views

CVE-2024-20854

Improper handling of insufficient privileges vulnerability in Samsung Camera prior to versions 12.1.0.31 in Android 12, 13.1.02.07 in Android 13, and 14.0.01.06 in Android 14 allows local attackers to access image data...

5.9CVSS6.6AI score0.00138EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/02 2:59 a.m.62 views

CVE-2024-20853

CVE-2024-20853 describes an issue in Samsung ThemeStore prior to 5.3.05.2, where improper verification of intent by a broadcast receiver allows local attackers to write arbitrary files to the ThemeStore sandbox. Affected component: ThemeStore (Android/mobile). Root cause: vulnerability in intent ...

5.1CVSS6.7AI score0.00152EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/02 2:59 a.m.19 views

CVE-2024-20853

Improper verification of intent by broadcast receiver vulnerability in ThemeStore prior to 5.3.05.2 allows local attackers to write arbitrary files to sandbox of ThemeStore...

5.1CVSS7.1AI score0.00152EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/02 2:59 a.m.29 views

CVE-2024-20852

Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows local attackers to access testing configuration...

5.9CVSS5.8AI score0.00135EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/02 2:59 a.m.14 views

CVE-2024-20852

Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows local attackers to access testing configuration...

5.9CVSS6.7AI score0.00135EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/02 2:59 a.m.55 views

CVE-2024-20852

CVE-2024-20852 affects Samsung SmartThings prior to version 1.8.13.22, due to improper verification of intent by a broadcast receiver. Local attackers could access testing configuration. Remediation: upgrade to version 1.8.13.22 or later. No exploitation details are provided in the supplied docum...

5.9CVSS6.5AI score0.00135EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/04/02 2:59 a.m.28 views

CVE-2024-20851

Improper access control vulnerability in Samsung Data Store prior to version 5.3.00.4 allows local attackers to launch arbitrary activity with Samsung Data Store privilege...

4.4CVSS5.1AI score0.00135EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/02 2:59 a.m.16 views

CVE-2024-20851

Improper access control vulnerability in Samsung Data Store prior to version 5.3.00.4 allows local attackers to launch arbitrary activity with Samsung Data Store privilege...

4.4CVSS6.8AI score0.00135EPSS
SaveExploits0References1
Rows per page
Query Builder