Lucene search
+L

20565 matches found

CNNVD
CNNVD
added 2024/07/02 12:00 a.m.12 views

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to SMR Jul-2024 Release 1, which stems from an improper access control issue with the...

7.7CVSS6.3AI score0.00143EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/02 12:00 a.m.11 views

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices prior to SMR Jul-2024 Release 1, which stems from an exception mishandling issue in Secure Folder. A physical...

4.3CVSS6.6AI score0.00239EPSS
SaveExploits0References2
NVD
NVD
added 2024/07/01 5:15 a.m.29 views

CVE-2024-3123

CHANGING Mobile One Time Password's uploading function in a hidden page does not filter file type properly. Remote attackers with administrator privilege can exploit this vulnerability to upload and run malicious file to execute system commands...

7.2CVSS0.00593EPSS
SaveExploits0References2
NVD
NVD
added 2024/07/01 5:15 a.m.26 views

CVE-2024-3122

CHANGING Mobile One Time Password does not properly filter parameters for the file download functionality, allowing remote attackers with administrator privilege to read arbitrary file on the system...

4.9CVSS0.00613EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/07/01 2:52 a.m.35 views

CVE-2024-3123 CHANGING Mobile One Time Password - Arbitrary File Upload

CHANGING Mobile One Time Password's uploading function in a hidden page does not filter file type properly. Remote attackers with administrator privilege can exploit this vulnerability to upload and run malicious file to execute system commands...

7.2CVSS0.00593EPSS
SaveExploits0References2
CVE
CVE
added 2024/07/01 2:52 a.m.65 views

CVE-2024-3123

CVE-2024-3123 affects CHANGING Mobile One Time Password. The vulnerability stems from the uploading function in a hidden page that does not properly filter file types, enabling an attacker with administrator privileges to upload and execute a malicious file to run system commands. According to th...

7.2CVSS7.1AI score0.00593EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/07/01 2:52 a.m.14 views

CVE-2024-3123 CHANGING Mobile One Time Password - Arbitrary File Upload

CHANGING Mobile One Time Password's uploading function in a hidden page does not filter file type properly. Remote attackers with administrator privilege can exploit this vulnerability to upload and run malicious file to execute system commands...

7.2CVSS7.2AI score0.00593EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/07/01 2:39 a.m.32 views

CVE-2024-3122 CHANGING Mobile One Time Password - Arbitrary File Reading

CHANGING Mobile One Time Password does not properly filter parameters for the file download functionality, allowing remote attackers with administrator privilege to read arbitrary file on the system...

4.9CVSS0.00613EPSS
SaveExploits0References2
CVE
CVE
added 2024/07/01 2:39 a.m.54 views

CVE-2024-3122

CVE-2024-3122 affects CHANGING Mobile One Time Password. The issue: file-download parameter handling flaw allows reading arbitrary files on the system, exploitable by remote attackers with administrator privileges. Documented impact: read access to arbitrary files; CVSS base score 4.9 (MEDIUM) wi...

4.9CVSS5.2AI score0.00613EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/07/01 2:39 a.m.17 views

CVE-2024-3122 CHANGING Mobile One Time Password - Arbitrary File Reading

CHANGING Mobile One Time Password does not properly filter parameters for the file download functionality, allowing remote attackers with administrator privilege to read arbitrary file on the system...

4.9CVSS7.1AI score0.00613EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/07/01 12:00 a.m.5 views

PT-2024-23861 · Unknown · Changing Mobile

Name of the Vulnerable Software and Affected Versions: CHANGING Mobile affected versions not specified Description: The issue concerns the Mobile One Time Password functionality, which does not properly filter parameters for the file download feature. This allows remote attackers with administrat...

4.9CVSS6.4AI score0.00613EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/07/01 12:00 a.m.10 views

CHANGING Mobile One Time Password Code Issue Vulnerability

CHANGING Mobile One Time Password is a password management application from the Chinese company CHANGING Mobile. It is used to set one-time passwords for authentication or transactions. A code issue vulnerability exists in CHANGING Mobile One Time Password, which stems from the upload function on...

7.2CVSS7.8AI score0.00593EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/07/01 12:00 a.m.6 views

CHANGING Mobile One Time Password Security Vulnerability

CHANGING Mobile One Time Password is a password management application from CHANGING Mobile, China. It is used to set one-time passwords for authentication or transactions. A security vulnerability exists in CHANGING Mobile One Time Password, which originates from an inability to properly filter...

4.9CVSS7.1AI score0.00613EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/07/01 12:00 a.m.11 views

PT-2024-23870 · Unknown · Changing Mobile One Time Password

Name of the Vulnerable Software and Affected Versions: CHANGING Mobile One Time Password affected versions not specified Description: The issue concerns a lack of proper file type filtering in the uploading function of a hidden page within CHANGING Mobile One Time Password. This allows remote...

7.2CVSS7.4AI score0.00593EPSS
SaveExploits0References4
NVD
NVD
added 2024/06/28 8:15 a.m.23 views

CVE-2024-30135

HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken...

7.5CVSS0.00327EPSS
SaveExploits0References1
OSV
OSV
added 2024/06/28 8:15 a.m.7 views

CVE-2024-30135

HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken...

7.5CVSS5.8AI score0.00327EPSS
SaveExploits0References1
OSV
OSV
added 2024/06/28 7:15 a.m.6 views

CVE-2024-30111

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

7.5CVSS5.8AI score0.00322EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/28 7:15 a.m.22 views

CVE-2024-30111

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

7.5CVSS0.00322EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/28 6:39 a.m.44 views

CVE-2024-30111 Missing Root Detection vulnerability affects DRYiCE AEX v10

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

3.3CVSS0.00322EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/28 6:39 a.m.65 views

CVE-2024-30111

The CVE-2024-30111 entry concerns HCL DRYiCE AEX mobile app with a Missing Root Detection vulnerability. Connected sources (EUVD-2024-28047, NVD/NVD-like records, CVE list) indicate the vulnerability affects DRYiCE AEX v10 and is tied to rooted-device bypass, enabling unauthorized access on roote...

7.5CVSS4.1AI score0.00322EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder