4966 matches found
Design/Logic Flaw
Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leading to possible temporary denial of service. The patch adds buffer size check logic...
Improper access control
Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather without permission. The patch adds proper protection to prevent access to location information...
roli.ee Cross Site Scripting vulnerability OBB-2597687
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-28784
CVE-2022-28784 describes a path traversal vulnerability in Samsung Galaxy Themes prior to SMR May-2022 Release 1. The issue stems from incorrect file path validation logic, allowing a system user to list file names in arbitrary directories. Affected component: Galaxy Themes (on Samsung devices) w...
CVE-2022-28783
Improper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to uninstall arbitrary packages without permission. The patch adds proper validation logic for removing package name...
CVE-2022-28783
CVE-2022-28783 concerns Galaxy Themes prior to Samsung SMR May-2022 Release 1, where improper validation allowed uninstalling arbitrary packages without permission. The description in multiple sources confirms the root cause as insufficient validation for removing a package name, enabling unautho...
CVE-2022-28782
Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Setup wizard. The patch blocks entry point of the vulnerability...
CVE-2022-28781
Improper input validation in Settings prior to SMR-May-2022 Release 1 allows attackers to launch arbitrary activity with system privilege. The patch adds proper validation logic to check the caller...
PT-2022-19230 · Unknown · Contents To Window
Name of the Vulnerable Software and Affected Versions: Contents To Window versions prior to SMR May-2022 Release 1 Description: The issue is related to improper access control, allowing a physical attacker to install a package before the completion of the Setup wizard. This can be exploited by a...
Vulnerabilities fixed in Android and Samsung Mobile
Google has fixed vulnerabilities in Android. In addition to the vulnerabilities fixed by Google fixed vulnerabilities, Samsung itself has fixed eighteen other vulnerabilities fixed in Samsung Mobile. The vulnerabilities potentially enable a malicious person to carry out attacks that lead to the...
CVE-2022-28784: Improper Limitation of a Pathname to a Restricted Directory
Path traversal vulnerability in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to list file names in arbitrary directory as system user. The patch addresses incorrect implementation of file path validation check logic...
CVE-2022-28783: Improper Input Validation
Improper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to uninstall arbitrary packages without permission. The patch adds proper validation logic for removing package name...
crm.kees.co.za Cross Site Scripting vulnerability OBB-2591756
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
hiddensee-urlaub-ostseestrand.de Cross Site Scripting vulnerability OBB-2591513
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
riding-vacations.info Cross Site Scripting vulnerability OBB-2590216
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Pixel Update Bulletin—May 2022Stay organized with collectionsSave and categorize content based on your preferences.
The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2022-05-05 or later address all issues in this bulletin and all issues in the May 2022 Android Security...
Android Security Bulletin—May 2022Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2022-05-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...
CVE-2021-44595
creationtimestamp| type| source ---|---|--- 2022-04-29 16:25:07+00:00| seen| https://t.me/cibsecurity/41631 2022-05-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/50912...
CVE-2021-46422
creationtimestamp| type| source ---|---|--- 2022-04-27 16:13:00+00:00| seen| https://t.me/cibsecurity/41489 2022-05-25 16:29:36+00:00| published-proof-of-concept| https://t.me/intelexch/13545 2022-10-16 13:45:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6985...
CVE-2021-37291
creationtimestamp| type| source ---|---|--- 2022-04-11 22:16:13+00:00| seen| https://t.me/cibsecurity/40497 2025-01-02 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-02 2025-01-13 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-13...