Input validation

Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass managed device restrictions via physical access to the device. Chromium security severity: Medium...

CVE-2022-3312

CVE-2022-3312 affects Google Chrome on ChromeOS, where VPN input handling had insufficient validation of untrusted input before version 106.0.5249.62. The underlying issue is in VPN-related code, enabling a local attacker with physical access to bypass managed device restrictions. The evidence co...

CVE-2022-3312

Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass managed device restrictions via physical access to the device. Chromium security severity: Medium...

CVE-2022-3312: Missing Authentication for Critical Function

Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass managed device restrictions via physical access to the device. Chromium security severity: Medium...

CVE-2022-20844 Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability

A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control SD-AVC on Cisco vManage could allow an unauthenticated, remote attacker to access the GUI of Cisco SD-AVC using a default static username and password combination. This vulnerability exists...

Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password (cisco-sa-sdavc-ZA5fpXX2)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control SD-AVC on Cisco vManage could allow an unauthenticated, remote attacker to access the GU...

PT-2022-5091

Name of the Vulnerable Software and Affected Versions Google Chrome on ChromeOS versions prior to 106.0.5249.62 Description The issue is related to insufficient validation of untrusted input in the VPN extension of Google Chrome, which could allow a remote attacker to disclose protected informati...

CVE-2022-20268

In RestrictionsManager, there is a possible way to send a broadcast that should be restricted to system apps due to a permissions bypass. This could lead to local escalation of privilege on an enterprise managed device with no additional execution privileges needed. User interaction is not needed...

CVE-2022-20268

In RestrictionsManager, there is a possible way to send a broadcast that should be restricted to system apps due to a permissions bypass. This could lead to local escalation of privilege on an enterprise managed device with no additional execution privileges needed. User interaction is not needed...

CVE-2022-20268

In RestrictionsManager, there is a possible way to send a broadcast that should be restricted to system apps due to a permissions bypass. This could lead to local escalation of privilege on an enterprise managed device with no additional execution privileges needed. User interaction is not needed...

Design/Logic Flaw

In RestrictionsManager, there is a possible way to send a broadcast that should be restricted to system apps due to a permissions bypass. This could lead to local escalation of privilege on an enterprise managed device with no additional execution privileges needed. User interaction is not needed...

CVE-2022-20268

In RestrictionsManager, there is a possible way to send a broadcast that should be restricted to system apps due to a permissions bypass. This could lead to local escalation of privilege on an enterprise managed device with no additional execution privileges needed. User interaction is not needed...

PT-2022-14491 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In RestrictionsManager, there is a possible way to send a broadcast that should be restricted to system apps due to a permissions bypass. This could lead to local escalation of privilege on an enterpri...

CVE-2022-20268: Undefined Security Weakness

In RestrictionsManager, there is a possible way to send a broadcast that should be restricted to system apps due to a permissions bypass. This could lead to local escalation of privilege on an enterprise managed device with no additional execution privileges needed. User interaction is not needed...

PT-2022-31691

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue concerns the use of managed device resources in the rawnand denali component. It was introduced in version v4.17 and is fixed in Linux Kernel version v5.15.46. The actual impact and...

PT-2022-31904

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns the use of managed device resources in the rawnand denali component. It was introduced in version v4.17 and is fixed in Linux Kernel version v5.10.121. The actual impact a...

PT-2022-31412

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue concerns the use of managed device resources in the rawnand denali component. It was introduced in version v4.17 and fixed in version v5.17.14. The actual impact and attack...

PT-2022-31067

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns the use of managed device resources in the rawnand denali component. It was introduced in version v4.17 and is fixed in Linux Kernel version v5.18.3. The actual impact and...

Siemens SINEMA Remote Connect Server Access Control Error Vulnerability (CNVD-2021-71425)

Siemens SINEMA Remote Connect Server is a remote network management platform from Siemens, Germany. The platform is used to remotely access, maintain, control and diagnose the underlying network. An access control error vulnerability exists in Siemens SINEMA Remote Connect Server versions prior t...

Home screen icons(shortcuts) are removed after every Android update

On Android Enterprise Full managed device, Home screen appsshortcuts are getting removed after Android UpdateSamsung Patch. This happens only on Samsung devices and with all patches available. This is not specific to any patch...