PT-2022-10437 · Qualcomm · Snapdragon Connectivity +3

Name of the Vulnerable Software and Affected Versions: Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected versions not specified Description: The issue is...

PT-2022-10441 · Qualcomm · Snapdragon Connectivity +4

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption in the DSP service due to improper validation of input parameters. This affects various Qualcomm Snapdragon products, including...

PT-2022-10429 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper access control in register configuration, allowing a user with user-level permission to access graphics protected regions. This affects various...

Samsung mobile SemIWCMonitor Information Disclosure Vulnerability (CNVD-2022-67281)

Samsung mobile is a cell phone from Samsung South Korea. samsung mobile SemIWCMonitor is vulnerable to an information disclosure vulnerability that stems from a configuration error in the network system or product during operation. An attacker could exploit this vulnerability to obtain MAC addres...

PT-2022-10394 · Qualcomm · Snapdragon Auto +4

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to improper validation of the rank restriction field, which may lead to a possible assertion. This affects various Qualcomm Snapdragon products,...

PT-2022-10399 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a possible memory leak due to improper validation of certificate chain length while parsing the server certificate chain. This affects various Qualcomm...

Samsung SmartThings Access Control Error Vulnerability

Samsung SmartThings is a powerful Samsung smart home mobile app from Samsung South Korea.An access control error vulnerability exists in versions prior to Samsung SmartThings 1.7.85.25. The vulnerability stems from improper access control and can be exploited by local attackers to bypass login...

Samsung mobile ScanPool Information Disclosure Vulnerability (CNVD-2022-67279)

Samsung mobile is a cell phone from Samsung South Korea. Samsung mobile ScanPool is vulnerable to an information disclosure vulnerability that results from a configuration error in the network system or product during operation. A local attacker could use this vulnerability to obtain MAC address...

Samsung mobile PersonaManagerService authorization issue vulnerability

Samsung mobile is a cell phone from Samsung South Korea. Samsung mobile PersonaManagerService is vulnerable to an authorization issue that stems from improper permission management in addAppPackageNameToAllowList, which can be exploited by local attackers to A local attacker can use the...

Samsung mobile SECRIL input validation error vulnerability (CNVD-2022-67280)

Samsung mobile is a cell phone from Samsung South Korea. Samsung mobile SECRIL is vulnerable due to a faulty input validation check logic in SECRIL. An attacker could use this vulnerability to trigger a crash...

CVE-2022-23169 Amodat - Mobile Application Gateway SQL Injection (SQLi)

attacker needs to craft a SQL payload. the vulnerable parameter is "agentid" must be authenticated to the admin panel...

CVE-2022-23167 Amodat - Mobile Application Gateway Local File Inclusion (LFI)

Attacker crafts a GET request to: /mobile/downloadfile.aspx? Filename =../.. /windows/boot.ini the LFI is UNAUTHENTICATED...

CVE-2022-1969

The Mobile browser color select plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the adminupdatedata function. This makes it possible for unauthenticated attackers to inject malicious...

CVE-2022-1969 Mobile browser color select <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Mobile browser color select plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the adminupdatedata function. This makes it possible for unauthenticated attackers to inject malicious...

CVE-2022-1969 Mobile browser color select <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Mobile browser color select plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the adminupdatedata function. This makes it possible for unauthenticated attackers to inject malicious...

WordPress plugin Mobile browser color select 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

Amodat Mobile Application Gateway SQL注入漏洞

Amodat Mobile Application Gateway, a mobile application gateway from Amodat Israel, is vulnerable to a SQL injection vulnerability in versions prior to 7.12.00.09, which stems from the username parameter in the login panel Lack of validation of externally entered SQL statements. An attacker could...

Amodat Mobile Application Gateway 安全漏洞

Amodat Mobile Application Gateway is a mobile application gateway from Amodat Israel. A security vulnerability exists in Amodat versions prior to 7.12.00.09, which can be exploited by an attacker to read sensitive files on the system...

HUAWEI EMUI 安全漏洞

HUAWEI EMUI and Magic UI is an Android-based mobile operating system developed by the Chinese company Huawei HUAWEI. HUAWEI EMUI and Magic UI suffers from an authorization issue vulnerability that stems from a lack of authorization in a system component, which can be exploited by an attacker to...

Samsung Account Information Disclosure Vulnerability (CNVD-2022-81377)

Samsung Account is a comprehensive free membership to Samsung services for Samsung mobile devices that can be used on smartphones, tablets, websites, TVs and other devices.An information disclosure vulnerability exists in versions prior to Samsung Account 13.2.00.6, which stems from the exposure ...